Behavioral task
behavioral1
Sample
feb93e69664f74533efaa5e548e406e1_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
feb93e69664f74533efaa5e548e406e1_JaffaCakes118
-
Size
457KB
-
MD5
feb93e69664f74533efaa5e548e406e1
-
SHA1
143431fcf4125d15ce92d5b16e8738fdc03c5712
-
SHA256
ffc7feb5b5f52d7b5bf30d8c6483e31a39909149e12520b362bf9880bbe9d09c
-
SHA512
46c49610b701466cd323fd7a7c3c5dad533d0c2013b2fbc271cf8d85458e52a4d1e3afb115700bd663b876f6a2fb3614486f5636561d3c58651c8588662dd9b2
-
SSDEEP
12288:dXgGB+AmDAXKNU/NmCGFg47K3wceonY3wyGUk7:BnungG97K3wcZ2Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feb93e69664f74533efaa5e548e406e1_JaffaCakes118
Files
-
feb93e69664f74533efaa5e548e406e1_JaffaCakes118.dll .vbs windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE