Behavioral task
behavioral1
Sample
15ab6cccdfe146e07288759c13690cdb_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15ab6cccdfe146e07288759c13690cdb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15ab6cccdfe146e07288759c13690cdb_JaffaCakes118
-
Size
22KB
-
MD5
15ab6cccdfe146e07288759c13690cdb
-
SHA1
fa3c1ee7ba4a4a0e0c379d98418d8d35586db557
-
SHA256
b769ca50101d60728cf17c2e569bfca136847d2089b24cdd9a680ed3ab188acd
-
SHA512
8d7202652ba6dab37ea34f073520e5814f0bd5eb5f1079d0339911d6e11e17468d9ce8e05aa629f0a875ec846a58d695048f801e76d2f3886ac1870f673e5e01
-
SSDEEP
384:1ZTbz/srZWGtPOeSkg+DKm+2fHc+Nefk9hfN1BPBiBwKD2e:7TbTsrZWGtPOergMJyfk9h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 15ab6cccdfe146e07288759c13690cdb_JaffaCakes118 unpack001/out.upx
Files
-
15ab6cccdfe146e07288759c13690cdb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ