Behavioral task
behavioral1
Sample
15c3de2a3ed2075a6480655454b833cc_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
15c3de2a3ed2075a6480655454b833cc_JaffaCakes118
-
Size
196KB
-
MD5
15c3de2a3ed2075a6480655454b833cc
-
SHA1
2eb4c650aae9c8c988d01e4b07fc78ca6db36d73
-
SHA256
d78924b3a7ca1f727413d61519deec7d42792fa2eb7f63502f45774a023d93bf
-
SHA512
d95e550c8a7c85008577bda0f183db6419fc5efa82ac6613a4916d6344982a4f0f93c3f9b6fc51e043ad4634a4b058e8ab01bf235eb507244a1d3d7e14eb10f4
-
SSDEEP
3072:X1UuHs96QX2wEdq0KgyspkIY5olOa6yUX3Mr3wdL8h4F0Oy01sG9U5CPS/X99HpQ:X17g22jjR2vUHM6L5Ly0HWH/NhJo8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15c3de2a3ed2075a6480655454b833cc_JaffaCakes118
Files
-
15c3de2a3ed2075a6480655454b833cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 976KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE