Behavioral task
behavioral1
Sample
15b48879dc54087252ce8f0cfa8e5817_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
15b48879dc54087252ce8f0cfa8e5817_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
15b48879dc54087252ce8f0cfa8e5817_JaffaCakes118
-
Size
856KB
-
MD5
15b48879dc54087252ce8f0cfa8e5817
-
SHA1
0c2b709853f5348519dc6a814c8b1c14ede9b12c
-
SHA256
038dc7ee6de7aa318a731da167976a258094788454fa04cf3afb3d9589407f6f
-
SHA512
d33005f9adfbdcb5753c06c5414210e4ce6c572235083677b8066144b829ff1d6c18ebd99d8f3b5268be50afce5bc74eead510de1d46c1ec464f955f8427c085
-
SSDEEP
24576:f3vRBZA8OKT+n0V6YBbI/TBqXeQP/jmWGcoURAZ+C9p:HR6KT+n/Ws/TBqXeALGcoURe59
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15b48879dc54087252ce8f0cfa8e5817_JaffaCakes118
Files
-
15b48879dc54087252ce8f0cfa8e5817_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 838KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE