UrBi
Static task
static1
Behavioral task
behavioral1
Sample
135e387b72f6e79abcf5fb3a21ec9f93_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
135e387b72f6e79abcf5fb3a21ec9f93_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
135e387b72f6e79abcf5fb3a21ec9f93_JaffaCakes118
-
Size
647KB
-
MD5
135e387b72f6e79abcf5fb3a21ec9f93
-
SHA1
a1d5809321947164e3d7838055c009cc6380a55a
-
SHA256
87680d84097972571f147201907d305816cf962b917dc787de86e22f2ab02df0
-
SHA512
a04319d41d0787fee83f6d5e4c80c582245469b7982856a606a153cc08b3a3a0cd56aa5ab9bd960ec8da15900ee34b5091803ff23a6b883a67e26a835983c268
-
SSDEEP
12288:HZjTrS8rTJZqC5WG1q9bnaF3xgAcOAR3XvLnu1gfxyP49zucjquwoK:RlI61q9LaFhgV1Tu1gfEg9ykw/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 135e387b72f6e79abcf5fb3a21ec9f93_JaffaCakes118
Files
-
135e387b72f6e79abcf5fb3a21ec9f93_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.UrBi Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 646KB - Virtual size: 676KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE