Behavioral task
behavioral1
Sample
15c224569e45128f6cbd49f803c0de38_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15c224569e45128f6cbd49f803c0de38_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15c224569e45128f6cbd49f803c0de38_JaffaCakes118
-
Size
3KB
-
MD5
15c224569e45128f6cbd49f803c0de38
-
SHA1
d9af221fc77091e3d2e52a4f70cbc85c35212176
-
SHA256
bd304929dbd0d31227ffb794d075a1d844aa56f31f81b931132588e13ee202ca
-
SHA512
722eb93151c4ef57107e985e8ad7a72a8df389e797a4785a105eb22de2a4a2dc920755ae5929e17d3a05771a475c7c2cdb8f2322733868611d23ccf622698075
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15c224569e45128f6cbd49f803c0de38_JaffaCakes118
Files
-
15c224569e45128f6cbd49f803c0de38_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE