Behavioral task
behavioral1
Sample
098cd28199c7aedfb2cb30491c8aa0e9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
098cd28199c7aedfb2cb30491c8aa0e9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
098cd28199c7aedfb2cb30491c8aa0e9_JaffaCakes118
-
Size
176KB
-
MD5
098cd28199c7aedfb2cb30491c8aa0e9
-
SHA1
94bc537f2b8d58d6cf5abdecd081ec4d616e1972
-
SHA256
b7a4b3f0a2a47f93b4352cdd0e1ddaa2d476aa4b492877aa258cdd2592327951
-
SHA512
8e31da990722de31aa8287890456ae015c0a79cbafcf59f0e8be41f5899bd905df509cf7312667288cf610b596a044ef5eb82e4f8ebd41eba8bf68a5c3fd6942
-
SSDEEP
3072:QLpWFs/X5bRK/ysjhFh+09uDiIUr6pK8E5rn0vofOJRMOom7C:o0Ou/yUhuD06O54UOJ2OX7C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 098cd28199c7aedfb2cb30491c8aa0e9_JaffaCakes118
Files
-
098cd28199c7aedfb2cb30491c8aa0e9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 616KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 507KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE