Behavioral task
behavioral1
Sample
015938e4652d79ca4ae77145c25259c2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
015938e4652d79ca4ae77145c25259c2_JaffaCakes118
-
Size
111KB
-
MD5
015938e4652d79ca4ae77145c25259c2
-
SHA1
352e834426a188cc1478689d57c4839574945d4c
-
SHA256
0240ec8e2f884c11c3e4ee6f0dac7bbca0c96b022162e4feceead24218222e3f
-
SHA512
6a6591f018e82804624f6cf2f354a8ff3b10fd678e66f7aa43633b56c6e4e010a054f8818356c43aa24a360c39e0bfeea86203d05268253066949ce1f9ce3889
-
SSDEEP
3072:EEA3CkSI3rEBrDGUkK15iEOjVkWzoutb:ByqPTcBpk6oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 015938e4652d79ca4ae77145c25259c2_JaffaCakes118
Files
-
015938e4652d79ca4ae77145c25259c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE