Behavioral task
behavioral1
Sample
19d26bc7e5f9a0f941f79ec83eb43dbb_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19d26bc7e5f9a0f941f79ec83eb43dbb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
19d26bc7e5f9a0f941f79ec83eb43dbb_JaffaCakes118
-
Size
370KB
-
MD5
19d26bc7e5f9a0f941f79ec83eb43dbb
-
SHA1
8fdd6f6705451416db71d7e7e74b7e4cd0eded30
-
SHA256
9a804a8256e39dc34c3bbafe2de89240b87497c6a166b0727e95121867a06224
-
SHA512
63702b413a5745370d618bde13a8cf61eb88631234aafdb64eb6eda129dfaad8a024d4b5e2cab9ab5d3a3dc4280c0e295af4062c416757fdd9a1d97d8bdd2b9d
-
SSDEEP
6144:FCrdPh3PLjq0BUct2ywOEzl2CThLDOqmwHzd71hfd2Wo+veoOHaVmzYJg0A6qKRy:FiDUcktRhLgwHJRL9veBauYJgyxInpuh
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19d26bc7e5f9a0f941f79ec83eb43dbb_JaffaCakes118
Files
-
19d26bc7e5f9a0f941f79ec83eb43dbb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 359KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AngelQQ Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE