Behavioral task
behavioral1
Sample
2f8e30e80865673bd880943f94f9e20e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f8e30e80865673bd880943f94f9e20e_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2f8e30e80865673bd880943f94f9e20e_JaffaCakes118
-
Size
1.2MB
-
MD5
2f8e30e80865673bd880943f94f9e20e
-
SHA1
d6da7b73f91121b4efe2d4d43763f9d1026c3eeb
-
SHA256
6ba20c352fa09b4c25df7d2ee4c6848a2efbfd12caf722d931258c0348edae9e
-
SHA512
83ec1f524509fe592e96fc2855109b3a86d3e4fbba812bc3c19c44f896c43b6526327f7b6b8a9fedee5003cffb0a88d0849f952f6e4d124dbf229bd70904089f
-
SSDEEP
24576:t1KW9k+nS9B2ETZl7TEhgto0eg0eRmg05OAhmnBMo:Jk+S9zTZlchj003Z5OAhmnBMo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f8e30e80865673bd880943f94f9e20e_JaffaCakes118
Files
-
2f8e30e80865673bd880943f94f9e20e_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 756KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 483KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE