Behavioral task
behavioral1
Sample
15510ae31ff3cb50b0833a6ff9f314d0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
15510ae31ff3cb50b0833a6ff9f314d0_JaffaCakes118
-
Size
30KB
-
MD5
15510ae31ff3cb50b0833a6ff9f314d0
-
SHA1
c75fef848434a20acc4a77eff14a2720144cd9c2
-
SHA256
d7c9fe85d426043ad7fb0d2bb36faf2bffbf0009a34a9be7e2446355cf6af055
-
SHA512
ac3639a9699b6573baa7bce7654bbcbc6a1d0e122f47bf90c103a2c439ba897373f737924134c1db5293eab1036c17c343251d287d5706f6ffd5c2bc7942f35c
-
SSDEEP
192:RHNXXgzmoBE4/qQBCjSJ/ItK175+zThh2+Cu6xXuLRzyIuReDK8Pj/FyXgzmoBEL:zXwzQLjSJ/z42hu+4zHt/wwzQJx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15510ae31ff3cb50b0833a6ff9f314d0_JaffaCakes118
Files
-
15510ae31ff3cb50b0833a6ff9f314d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE