Behavioral task
behavioral1
Sample
52f2f6e8f290cd5a13033ea7dc2a297f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
52f2f6e8f290cd5a13033ea7dc2a297f_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
52f2f6e8f290cd5a13033ea7dc2a297f_JaffaCakes118
-
Size
8KB
-
MD5
52f2f6e8f290cd5a13033ea7dc2a297f
-
SHA1
3ed45ce92e32e15f3f17ef1559b3e98395204833
-
SHA256
9a954e28d4db53b91ff33acb164e647ca77c7047a1798d3ff126fefa88656470
-
SHA512
60a1548bf04473e0017cd65c594dbabe56a1e4869ad47ccd31adf05d167d9e8db57015f37f0ef11a54c6e26cf7daf7c2b298d781a8920682905f8cf293c3ecec
-
SSDEEP
192:Gs8/I5EVS/3CIlQUbW+pmTtN6iZF8aqxTeFNio2BUyRy:zEaBBrpmJYeXNj22yRy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52f2f6e8f290cd5a13033ea7dc2a297f_JaffaCakes118
Files
-
52f2f6e8f290cd5a13033ea7dc2a297f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE