Behavioral task
behavioral1
Sample
2ca5438bcb645bc132d5cdecd0bac2fb_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
2ca5438bcb645bc132d5cdecd0bac2fb_JaffaCakes118
-
Size
17KB
-
MD5
2ca5438bcb645bc132d5cdecd0bac2fb
-
SHA1
95c0aae009ad33a74ed0c8278b2d0a3ce0586a33
-
SHA256
db68139fc0c8bb19b0f0eaf4e1042a46eacabfde68e5b26f3fde1dee476dea50
-
SHA512
fe3cb62404e55bf2190156281924de84bcdd4e80c124cab6d201ba5a9f7e5bcd1a2cc12f2b3e1f2239960d46e000dfda0c0d0371fd423a9392e865f4e7a55511
-
SSDEEP
384:WlYEfjMhk6G+Kbqub3wfJLRgcRkyijS9PgObj:bEf4hfUquMfBBI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ca5438bcb645bc132d5cdecd0bac2fb_JaffaCakes118
Files
-
2ca5438bcb645bc132d5cdecd0bac2fb_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPXA Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPXB Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE