da1df0fa552f
Behavioral task
behavioral1
Sample
2bec98083b0d29ae986948a77aa6bb97_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
2bec98083b0d29ae986948a77aa6bb97_JaffaCakes118
-
Size
47KB
-
MD5
2bec98083b0d29ae986948a77aa6bb97
-
SHA1
ac07f8c0e1e1f095894c4a30c16ffdde3da6b9d2
-
SHA256
ece85c3ca0865f690b783cd78a7b12ce0e24ce60eb18a18c90546b03cb002cb8
-
SHA512
43f9d44219dd9db77a533e6d929311a8934056ce064544537f4334d133b715ccfe9b6e07c8976ee1287e1cc9a88fe34997cbcf788d6234aa6af659f7a80021a1
-
SSDEEP
768:BNZf5WfM4T5DOeQBtZX7lBBiiPBuxuI6GVZYA0G35rgqRIst:BNZf5YJT5DmtRJrPBuxuI6GVZv39XR1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bec98083b0d29ae986948a77aa6bb97_JaffaCakes118
Files
-
2bec98083b0d29ae986948a77aa6bb97_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE