Behavioral task
behavioral1
Sample
0613c113c80a905bc73998f8b84b67e0_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
0613c113c80a905bc73998f8b84b67e0_JaffaCakes118
-
Size
926KB
-
MD5
0613c113c80a905bc73998f8b84b67e0
-
SHA1
8c3d3b268d07a6e6a305a93d9ee8a433d821356c
-
SHA256
fa7bfaf52f3a18a406396bdd813ff5caeec89588484e2ac1a1e0ac85c94c8948
-
SHA512
141fb44d7ac972283a2c8b2f444606e3d1d1d143aa0165554b64793212c9bbe0205e1a852394a2da94cf3679d794f49862a67452471dec004239ea6956a9ddcd
-
SSDEEP
24576:xyI4D+XkXFs8yec7S1bNj7mj7vAwC6Dhe62V1RB7:EIe+UXF72OT3+PhPWRB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0613c113c80a905bc73998f8b84b67e0_JaffaCakes118
Files
-
0613c113c80a905bc73998f8b84b67e0_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 922KB - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE