Behavioral task
behavioral1
Sample
15dd08ba1d605c164d964decdcd539c6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15dd08ba1d605c164d964decdcd539c6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15dd08ba1d605c164d964decdcd539c6_JaffaCakes118
-
Size
31KB
-
MD5
15dd08ba1d605c164d964decdcd539c6
-
SHA1
528d930d0fda80510f7f32697bd3cbcb9114d324
-
SHA256
8b0b5de9c5209ae7d95993d0882f5cfe0e15ff60c0ce30c78d6c4e80bce671f8
-
SHA512
6b75113ccb91746d4711f41a1d6a712e5e231521185db635f5a7be22bde2c371f6a8350b5fc4f10b6b81ff07773e0c848231b563dbd5dda183a085122b8ee2b5
-
SSDEEP
768:kLklD4zXpoSv6t8YwknTfKRpSbcpJCQ+uf1N:kL40zZo6UVwuCRfYUH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15dd08ba1d605c164d964decdcd539c6_JaffaCakes118
Files
-
15dd08ba1d605c164d964decdcd539c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE