Behavioral task
behavioral1
Sample
01964c3f33a57c130cd270689e081f81_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
01964c3f33a57c130cd270689e081f81_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
01964c3f33a57c130cd270689e081f81_JaffaCakes118
-
Size
124KB
-
MD5
01964c3f33a57c130cd270689e081f81
-
SHA1
60c582e9f504d6cc0263eb62abbe76369e14085f
-
SHA256
cf4b1ea8e2887e82ea4cb51ed4fbca18e5772373f691fa1b1bc91395ca2f2aab
-
SHA512
a4692fec5140cf64abc80ce1d090b2215ad230452c2296c39b8daef35fc848d07199ff2c90f4966b8ab75d548f538edcac5fe5fb6db2c9dd76ccdb9d06ae4d7d
-
SSDEEP
3072:7BUatLls4BUH1Tm1Pv1thOKVNldGZXy6nQZYQnChlZS:7BxtPu1JBhOnC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01964c3f33a57c130cd270689e081f81_JaffaCakes118
Files
-
01964c3f33a57c130cd270689e081f81_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE