ytux
Behavioral task
behavioral1
Sample
10f1812ba69a9937114dfab05df72b7f_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
10f1812ba69a9937114dfab05df72b7f_JaffaCakes118
-
Size
38KB
-
MD5
10f1812ba69a9937114dfab05df72b7f
-
SHA1
1c95e75dcb505b160c4ae20e87b4ae1194410664
-
SHA256
7e9ada743d0fd00da7d96c0efba42070fee1e0c52d7cc6a2930bbcc90e9e8367
-
SHA512
c7569d65d1a688b43d4cf06104c617e4550ee68d79211a687ad4ee75f6c69aa636753e36bfbd7e221b3c88ed04b28535f015e63ca264ac521afaf671d4b8803f
-
SSDEEP
384:ag7i2gXqToHkJqifI/cnnyL09Y8BMZSlhtaMK9FqWdWB0b:aMYqTxJ5fI/wBZlhtTKq4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10f1812ba69a9937114dfab05df72b7f_JaffaCakes118
Files
-
10f1812ba69a9937114dfab05df72b7f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE