Behavioral task
behavioral1
Sample
00faac7951328980fd09a2d46ca42cc4_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
00faac7951328980fd09a2d46ca42cc4_JaffaCakes118
-
Size
260KB
-
MD5
00faac7951328980fd09a2d46ca42cc4
-
SHA1
b39f8f1e1d7fe80be9046708b6a3ea69d5e138f6
-
SHA256
6c08af2aa8157d3e98035feec8e4f6c3f97d9df4d2f0c029582fabbb73a70cbd
-
SHA512
d753b1973146fa1bc516aa6185cf1416770d6a4d983debcd276c8b5a838346d5aa62bace6bb740ecdc28e3f7853f4ffe2cfcae363216f81c4a2f57a3996542c1
-
SSDEEP
3072:+dGRRbFjXiu8RRvwDTA7XWleyOOsDdOOzFvBJfnl5TOh:lRRhrZ8btW0ygnVBNnfS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00faac7951328980fd09a2d46ca42cc4_JaffaCakes118
Files
-
00faac7951328980fd09a2d46ca42cc4_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
IKGV Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IKGV Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE