Behavioral task
behavioral1
Sample
19228ec96476822f4c078a0d1205a412_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19228ec96476822f4c078a0d1205a412_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
19228ec96476822f4c078a0d1205a412_JaffaCakes118
-
Size
213KB
-
MD5
19228ec96476822f4c078a0d1205a412
-
SHA1
b7aaa538e540bd89c70920cdfb28328f3736d048
-
SHA256
52365eba20457e9c8026599a876e36a57144ec98deb229d5e6df9037fe71a30c
-
SHA512
29657fff819fa1146228b1f549bb7a11e031c1471bb41ba33e76ed0046120d6869f246a940c77fe0276e5f38cfe51101e9a1c0da3c4aa4e486c5a504a452b71d
-
SSDEEP
6144:AkeENDvTSn2SV/GuhYdViC7X57+nMNT+MlL/yC:ANEND/k/GLPX57+n2TV7yC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19228ec96476822f4c078a0d1205a412_JaffaCakes118
Files
-
19228ec96476822f4c078a0d1205a412_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE