Behavioral task
behavioral1
Sample
3f6fe6d2f0908dbac1dab6ba1e73d5c3_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
3f6fe6d2f0908dbac1dab6ba1e73d5c3_JaffaCakes118
-
Size
217KB
-
MD5
3f6fe6d2f0908dbac1dab6ba1e73d5c3
-
SHA1
179d90176900cb896e9d480f10652f03350f8b9d
-
SHA256
3d91a30155b1d613596705324d31b50165914ce83460b21612d9728323455168
-
SHA512
95899cbbc4f0b1c2dc783284e7c67a7526e82ee15cc742445d8908e84206ba1deda2dd1a449e7dd8adffeaf68b754055ab93f8be20a6640772adf946b2e5588c
-
SSDEEP
384:HJpdTU0EEPcdzWiShsOZ7giRKIyolb2G1rR5qITALDy6qaVCvjB6JPFuVu7Hk:H7dTUbRINZHjN2XpC6qaG6Jb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f6fe6d2f0908dbac1dab6ba1e73d5c3_JaffaCakes118
Files
-
3f6fe6d2f0908dbac1dab6ba1e73d5c3_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE