Behavioral task
behavioral1
Sample
199cf1f60be6e04adee53cdd57d4ea28_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
199cf1f60be6e04adee53cdd57d4ea28_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
199cf1f60be6e04adee53cdd57d4ea28_JaffaCakes118
-
Size
467KB
-
MD5
199cf1f60be6e04adee53cdd57d4ea28
-
SHA1
04af806e0def9cc9f204a59143578be3cf664980
-
SHA256
96b678c00cf65a915102650420836ac10c8204640dd03ec57f2dc336f4979039
-
SHA512
e5b2b78bf90f9bc1edda8abcf0bcfed14bf90a53c40f8c6c5ed062e969ea9507c6c835656d50051ecd03bcc9e5c76ff4e337ca0a284f0a78e5ec807d3d19fc1e
-
SSDEEP
12288:pSzHfTs9ZBcct3r5kuR9+mhq3aGaVj9oSmgXyF47V:pSDfT+byuXqKGG9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 199cf1f60be6e04adee53cdd57d4ea28_JaffaCakes118
Files
-
199cf1f60be6e04adee53cdd57d4ea28_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 404KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 370KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE