Behavioral task
behavioral1
Sample
15ef46c91958e6bdd623b4a7d23c12c0_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15ef46c91958e6bdd623b4a7d23c12c0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15ef46c91958e6bdd623b4a7d23c12c0_JaffaCakes118
-
Size
151KB
-
MD5
15ef46c91958e6bdd623b4a7d23c12c0
-
SHA1
3d8af1be6e19667c457c4588451b9288f158adb8
-
SHA256
d5d70ddce767a37c34a532304da1bd32d7148de416b0ae6908ba862d04cc8d72
-
SHA512
357e813bc135441a73d365856824bb43860d6566ea3159a1451273eb82c6bfd8991cca847c7f769c6475653d29bb189b81a0c9b36d8104c40a067e53a3997423
-
SSDEEP
3072:OJDi206AMmM51EymJPriRIjXQ+1iltvrNGqalmTxUB2tHDI98PL0V22c8:OJ2/OmM5yuRIjXXslFNylSJtvY26
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15ef46c91958e6bdd623b4a7d23c12c0_JaffaCakes118
Files
-
15ef46c91958e6bdd623b4a7d23c12c0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 278KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE