Behavioral task
behavioral1
Sample
15fdfb55011576d49442329f66b9ee34_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
15fdfb55011576d49442329f66b9ee34_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
15fdfb55011576d49442329f66b9ee34_JaffaCakes118
-
Size
20KB
-
MD5
15fdfb55011576d49442329f66b9ee34
-
SHA1
93273e67a2fdbd5a39f7650ba91e4501bd0d6098
-
SHA256
99f700a82d0677fe18f76326d9ebcaf2d8e76bb4e33e7c8170484b4332dbad06
-
SHA512
733bf91242f07ddf7457fe1471138e0352d6a6101016201079d65395f6a3654ddbe99463d90587927bb3321e041ce49edd1896f10a475003d433041f59f9402a
-
SSDEEP
384:f6rq4OBEruCjiMhPVeLTmKV+NYHu4nu5SfrFHQL9TGlH8igBqdJnnrx6Bq/:H6T7h0mE+NGu0u5AQL9TycTBirxSq/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15fdfb55011576d49442329f66b9ee34_JaffaCakes118
Files
-
15fdfb55011576d49442329f66b9ee34_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 482KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE