Behavioral task
behavioral1
Sample
ff1a1e1572cf6f7cf547f741eb6f9467_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
ff1a1e1572cf6f7cf547f741eb6f9467_JaffaCakes118
-
Size
32KB
-
MD5
ff1a1e1572cf6f7cf547f741eb6f9467
-
SHA1
117f6ce61e6cc3c8f3c9f5d993204c2219978c26
-
SHA256
ac43476afb4158c1bda964a6f84f661fa3c4c678177c52ea3c836f20e028598e
-
SHA512
7d886f4abbd61368a1a5f97a36b6b5bad3b9b41ab2923b56522b2afd8264b4a515d389d2780e355eac6fa656cc019308c0044a323dbe3862901d8a1c344e7dfc
-
SSDEEP
384:PJ/Be0EcyfYPPBRmcLtJheoc2F6XDAkt9O9Qc+GmAEy1PF3Vv+UnrC+G0k0DjKLY:/FfxtJxJQXDrt9wpjGImBLj6taHH9Nm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff1a1e1572cf6f7cf547f741eb6f9467_JaffaCakes118
Files
-
ff1a1e1572cf6f7cf547f741eb6f9467_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE