LoadLibrary
Behavioral task
behavioral1
Sample
37d511ad3afc985007ebafeb1f0e5858_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
37d511ad3afc985007ebafeb1f0e5858_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
37d511ad3afc985007ebafeb1f0e5858_JaffaCakes118
-
Size
20KB
-
MD5
37d511ad3afc985007ebafeb1f0e5858
-
SHA1
08a79077f75c3ca260dfa8102115b5f4fc24ca07
-
SHA256
e224a9a7046e34161d611ae595adee7352635407862ec647bb64044fb801961d
-
SHA512
bfd72c8d40ed15aeda14254188b06ca14f2e43b4e9a81ceb9741dc856be2b9568749d3686e84be1a6a89dc3d5b06d4808ab98f8a7b57cc3912b4f3918af9970f
-
SSDEEP
384:b0n0V47HruVgPcDEz+a/Fh0p2GPqYv4AwgBAxXr6+e9Pfqbn1:5VwH7Pcr0FfGP4xWha5
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37d511ad3afc985007ebafeb1f0e5858_JaffaCakes118
Files
-
37d511ad3afc985007ebafeb1f0e5858_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TX Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE