Behavioral task
behavioral1
Sample
15a50334d1367ab417a5688430388dfc_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
15a50334d1367ab417a5688430388dfc_JaffaCakes118
-
Size
784KB
-
MD5
15a50334d1367ab417a5688430388dfc
-
SHA1
19931821b9bb76508f6c610d85c0fead3cf5b39c
-
SHA256
277a43dbe85d6b4deb3a99d744f8cfa38a102326e49d1cb25073801fe3d3b3a6
-
SHA512
6644eca8be6cf72778a3f6919f7d753641c6b44a961472a0d234235209df1c67a0ccaf8ef31c4c7f14dcebe08074bd82805dd9f5f0c8ffe5fcf2339d4dce5a7c
-
SSDEEP
12288:xIRg6uik4RwrYWPf6mPDvKpPQc0XGJgN5zxGzh9Kd/ezHA89gWthWC/xk6pt1jA:xI0ORwBXTPw02Jo5IXP/vtDxk6pDj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15a50334d1367ab417a5688430388dfc_JaffaCakes118
Files
-
15a50334d1367ab417a5688430388dfc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE