Behavioral task
behavioral1
Sample
ef8a557c06406d0d6709caf2f1f99047_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef8a557c06406d0d6709caf2f1f99047_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ef8a557c06406d0d6709caf2f1f99047_JaffaCakes118
-
Size
110KB
-
MD5
ef8a557c06406d0d6709caf2f1f99047
-
SHA1
be177a3188c9766a3adaee9a1ba6c66605d89af2
-
SHA256
de95030fe735c6965ad9ea9b51fef3b5257d6c7e97a0d0252a1f02c089a92f90
-
SHA512
9c0078a28dddc7fe68f1900398d2e1ca96243ee7394928bdf15b5003b1d841a3842231178600dac38313e822aefa060c1bed180a080411810a70aa9204a9df79
-
SSDEEP
3072:AwQv/1jSf64u8gSLZvz4MkLncPePc+ah10:AfvY60gSRqcPe0/h10
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef8a557c06406d0d6709caf2f1f99047_JaffaCakes118
Files
-
ef8a557c06406d0d6709caf2f1f99047_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 25KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE