Behavioral task
behavioral1
Sample
1959f3d00cd5574584fbd36f623b2efb_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1959f3d00cd5574584fbd36f623b2efb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1959f3d00cd5574584fbd36f623b2efb_JaffaCakes118
-
Size
470KB
-
MD5
1959f3d00cd5574584fbd36f623b2efb
-
SHA1
79c4173d1244b223bb6ce35f50d66772b56a8acf
-
SHA256
58cc20718bfce361be73df53dcd284973b2d8a60e95ef014699b7520d03b0e1e
-
SHA512
877c95d954b05529f00853107cdd26d886cd0aebb571bfab97e781bff95a5aaf6c6d9a1963bd6f3598892ea244a82d65d681daa219e4c603fccb31fbd6970c24
-
SSDEEP
6144:aW8jOyTnFNYcMjvb6s06y3IHkD8PObZJ282FZzc4fdydV+nyyMrDQmd2ZlQ08:aW1sFNZ3fBrbZE8WzFnwl2ZlX8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1959f3d00cd5574584fbd36f623b2efb_JaffaCakes118
Files
-
1959f3d00cd5574584fbd36f623b2efb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE