Behavioral task
behavioral1
Sample
1731281bb993cf2d94584c2c65e038f5_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
1731281bb993cf2d94584c2c65e038f5_JaffaCakes118
-
Size
359KB
-
MD5
1731281bb993cf2d94584c2c65e038f5
-
SHA1
c6a9fab3d8cc4405de59c25744ef37e125b514b2
-
SHA256
94c22482f0975b2bcb7faa8164753d6abcf7683c005dc7ff6f92674912fbb805
-
SHA512
1239e77e14328c7cf44fb3184d7f9cb827b3c639540dfb3294a201cce275e0a6d62095373e4d56789b52199ea1f6d1efbc0f5e8d48c6f2b6387d64c7368be274
-
SSDEEP
6144:EIjWrQOBLTgII56kzK8ja4CEI/W//L6WvC:h4B4IIYkzKd4CEyW//L6W6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1731281bb993cf2d94584c2c65e038f5_JaffaCakes118
Files
-
1731281bb993cf2d94584c2c65e038f5_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 246KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE