Behavioral task
behavioral1
Sample
56f8b1ef3051c4fee3d7c6df1e0d35aa_JaffaCakes118.dll
Resource
win7-20241010-en
General
-
Target
56f8b1ef3051c4fee3d7c6df1e0d35aa_JaffaCakes118
-
Size
2KB
-
MD5
56f8b1ef3051c4fee3d7c6df1e0d35aa
-
SHA1
a48cd319d0d0ae5d32dadf5857c2b6d428c5c9a5
-
SHA256
9d553967a765828bb4177ab43fe515c0c39b40d7a436ad8257fd77b0d88d96fd
-
SHA512
298e45b55d67957aa223ffbb7514bbbd44bc6a9762286f78ce839fd2cff499f5f4d0903bcbadb5260c7ceb635057e9b813038baff5e2113ff13da55289855a2d
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56f8b1ef3051c4fee3d7c6df1e0d35aa_JaffaCakes118
Files
-
56f8b1ef3051c4fee3d7c6df1e0d35aa_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 756KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 356KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_BOX_ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE