Behavioral task
behavioral1
Sample
15c535ffcfccba53ac177944e1a088a0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
15c535ffcfccba53ac177944e1a088a0_JaffaCakes118
-
Size
359KB
-
MD5
15c535ffcfccba53ac177944e1a088a0
-
SHA1
c13208cbf850cddef9755875515396ec6686339d
-
SHA256
0b06263bc381163a161fae1a70c1d74a329b76db7851e4db885e7a186f50c705
-
SHA512
408ac26d43a85847d344403cc4acd6aa3c20341da47414f8fc1fbcf56f449af7a091e9f82d3e975c564ce925c8bed549e08aa9a0e9219c9caa0b451f48fa24d8
-
SSDEEP
3072:XhInN0QAs1JcpNtBdlzWaA/8m7zD6JDrP/AH+G0B7Bx:X+nN0pEJitnhZA/8G6JDDY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15c535ffcfccba53ac177944e1a088a0_JaffaCakes118
Files
-
15c535ffcfccba53ac177944e1a088a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE