Behavioral task
behavioral1
Sample
15cd55d4d3e0772109288bced21569a0_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15cd55d4d3e0772109288bced21569a0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15cd55d4d3e0772109288bced21569a0_JaffaCakes118
-
Size
185KB
-
MD5
15cd55d4d3e0772109288bced21569a0
-
SHA1
3cd06470abc48ee229a556c7b8cf63aee9636106
-
SHA256
b03b6198d90cf1e672e6c42d70927c2fad0f761e5c7057de95f30afbf804c3d6
-
SHA512
fc7469859a97a1e406b50733fd213bc34b4968e5f4ba46496df7a43004db132ac4e8b1b0f662e7cdb5774e7b6cfe50ea08dc10b6e0877abb6911f176d414c5b0
-
SSDEEP
3072:D8FJjyV1/YjPm9CtjyV1/YjPm9y8XGsyd7FkJyWDBL0iItHBnI2Sz/UW7tYI:D8FJjyV1/KjyV1/NXGsyd7FkJy+2SDtG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15cd55d4d3e0772109288bced21569a0_JaffaCakes118
Files
-
15cd55d4d3e0772109288bced21569a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA