Behavioral task
behavioral1
Sample
2f578174cead5257345f507d9811c195_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
2f578174cead5257345f507d9811c195_JaffaCakes118
-
Size
932KB
-
MD5
2f578174cead5257345f507d9811c195
-
SHA1
49fd1c0685d0a3ddfc9380ec710a08885bb1e240
-
SHA256
8e0f27043531591f4eaf35850ec52c55a3c02a0ddca1e98e1f96760b680b08ab
-
SHA512
b2d6301eb863ef5636ba3df0fccd6a38af3853a8c5ca0c8414b7d8b084be3828ae48435c43e0f05311f045f52b4b0ba7b81088b758b6b22bc8139982833243eb
-
SSDEEP
24576:uuoLr9pQ4zpj2AJC5jdw9RxnsT4veK4/KK2o:ufE0pSM4jKj5vZ4SK2o
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f578174cead5257345f507d9811c195_JaffaCakes118
Files
-
2f578174cead5257345f507d9811c195_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 929KB - Virtual size: 932KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE