Behavioral task
behavioral1
Sample
15415297d0af9f5599ad66dbfaf443c1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15415297d0af9f5599ad66dbfaf443c1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15415297d0af9f5599ad66dbfaf443c1_JaffaCakes118
-
Size
6KB
-
MD5
15415297d0af9f5599ad66dbfaf443c1
-
SHA1
22cbbcca3794dc8fcd47d604ae34b89143da6627
-
SHA256
444593404cede8100fb419ad529c40002d7241a3a683879be38e79e7537102ef
-
SHA512
60ec4758863d519b4c257c2dbb98b85805dff03d1358ace3ed6bf124fb0518a2cdb22ad140136715715185540bd20797b9d9db25c2b881ca64b8b5c1ff1a0a29
-
SSDEEP
192:eBARletxGZQbbN0mJRGE/7/SHw+rNnUt10Qe:BRIUZUbNPawMUbDe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15415297d0af9f5599ad66dbfaf443c1_JaffaCakes118
Files
-
15415297d0af9f5599ad66dbfaf443c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE