Behavioral task
behavioral1
Sample
0102261c22f7b5e2262aec149d1031a1_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
0102261c22f7b5e2262aec149d1031a1_JaffaCakes118
-
Size
153KB
-
MD5
0102261c22f7b5e2262aec149d1031a1
-
SHA1
f1555bc7bfb1fa46947cedfc598d397c6cc53dff
-
SHA256
f01ebbf98b0b2625d340ac8fa11aca8baae33f645be2874fc20d752b0e464b14
-
SHA512
48dd57bdd1a18920eee01415afd12c2f771de3c7a8c9874fd57ee5083107258bbf4131bba5e5daee36461b6ab76d09d2423dbb4e045b55eca5cbde710e9e507d
-
SSDEEP
3072:FdAhaeA0dtnpZtMnLShLbzv2OK+wKLxhEYout:szDBaOLbzv2OPpxhToS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0102261c22f7b5e2262aec149d1031a1_JaffaCakes118
Files
-
0102261c22f7b5e2262aec149d1031a1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE