ibuntu
Behavioral task
behavioral1
Sample
3ee7f0fa6d7865c73f336a190086b6da_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
3ee7f0fa6d7865c73f336a190086b6da_JaffaCakes118
-
Size
59KB
-
MD5
3ee7f0fa6d7865c73f336a190086b6da
-
SHA1
ac0871eb7152cc5fad25c1b34aaad672be67fc69
-
SHA256
d634fb8d0482cca1ed50c55c67db783c81e1c5ef8885d573270ad258fef509a3
-
SHA512
3a57f3e818f870d29be01b1a1a0b283a1ad99f5104fb655ca46c1c0cc04bf0a3000cea170c997e1c21feba70c11f0068685a78b67c5dff3e5871ee415e5a821b
-
SSDEEP
384:njcehiA86PVbcjh95DREHhWS5OXqm9cUCQaTJjp:aAtVbcd3REHhWuOXq6Av
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ee7f0fa6d7865c73f336a190086b6da_JaffaCakes118
Files
-
3ee7f0fa6d7865c73f336a190086b6da_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE