Behavioral task
behavioral1
Sample
fa6e7c7a2ed9f9c9b05e21154b4e439d_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
fa6e7c7a2ed9f9c9b05e21154b4e439d_JaffaCakes118
-
Size
175KB
-
MD5
fa6e7c7a2ed9f9c9b05e21154b4e439d
-
SHA1
84262933ae76d7f1268c6da9e1bb2e46f47410b6
-
SHA256
cc0a76ca9339e45525ef4ec1022ba255dcc415f0c5a29632b444279efd823af1
-
SHA512
ec27f18a153f9d77a85ec1e93865378f3e9917c735724ba82f6bdd2711ee1680f4635a250c2cd7f2eec70c306032dc25a3a1c06e3bb8c0902d80079504ad44d1
-
SSDEEP
3072:IQH+a/l/68BgGIK7G6wXvCt3mNkc1l7CyxT+jWbzqQRbdv+8WppAT:I6NBmoXc17um+QRp+N4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa6e7c7a2ed9f9c9b05e21154b4e439d_JaffaCakes118
Files
-
fa6e7c7a2ed9f9c9b05e21154b4e439d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE