Behavioral task
behavioral1
Sample
15d7e08c24af45766fa7219dc454ce66_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15d7e08c24af45766fa7219dc454ce66_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15d7e08c24af45766fa7219dc454ce66_JaffaCakes118
-
Size
2.1MB
-
MD5
15d7e08c24af45766fa7219dc454ce66
-
SHA1
139d4c089fef9a372b8605c6fb3699edc0707efe
-
SHA256
bb3992f100d4a465f25bf7d6ba5f60d1b56080366c5eaef5febb6032c1472577
-
SHA512
ca4162925540aac377577fa0cc8e8c0a23add85a0a298e53f3dc53aed4d69db8c7a4a5103f36368d95442a8987da3ee39d901c8e15728cc96bad6a95aea7b1f0
-
SSDEEP
49152:ZbsD9mJEaw1Yrni6lti0iKTDnHZyxWlTJ8fVhq+O4cBF:SDoJEaw1Y7bOyH3/8/q+O42F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15d7e08c24af45766fa7219dc454ce66_JaffaCakes118
Files
-
15d7e08c24af45766fa7219dc454ce66_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 25.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE