Behavioral task
behavioral1
Sample
wlsetup.exe
Resource
win7-20240611-en
General
-
Target
15cf4a9ac62549eacfece5f2e196f466_JaffaCakes118
-
Size
40KB
-
MD5
15cf4a9ac62549eacfece5f2e196f466
-
SHA1
b63cafc123ec60e146f3f4708429639726b47695
-
SHA256
9c6bf4967da1395b836808c367d844972d6c4437cc2b4b16b70b92829d2c0979
-
SHA512
900f07f9da1142fdb9a8c51598312244ca53e739bc6de1a5a8882b574891643f9dd348603aeaa48b3fa1714ba6361b690d7e3868f007f4537dbcbb17d179158b
-
SSDEEP
768:DEmxmWkzb6IB+pLv1eP0kKEymAaTQWVd+//K:D5mMIB6ecCGat7Q/K
Malware Config
Signatures
-
resource yara_rule static1/unpack001/wlsetup.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/wlsetup.exe
Files
-
15cf4a9ac62549eacfece5f2e196f466_JaffaCakes118.rar
-
wlsetup.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE