Behavioral task
behavioral1
Sample
19f2288ea82274665fc323ad24cc994e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
19f2288ea82274665fc323ad24cc994e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
19f2288ea82274665fc323ad24cc994e_JaffaCakes118
-
Size
462KB
-
MD5
19f2288ea82274665fc323ad24cc994e
-
SHA1
c3885f46ecf7f56ff30b8536c1c0b5f330d80f41
-
SHA256
34c03f0c97764d22dab0266f07df85f8b32db3fb38ec8cbdebea19e37cb84065
-
SHA512
c83f2f934cb8ab106407194dc23d65bb5397b676bbe8d7d8db8a326eadb97d0a4b017f4aadeadd83109efa13a82bb4cd00de955ef6938a2f2019ef84b8534a6e
-
SSDEEP
12288:tfLu4PNRf9aqo/6bEm5zWp9hv6gX/Ptf:t6ANRf9arA8hv6gX/Ptf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19f2288ea82274665fc323ad24cc994e_JaffaCakes118
Files
-
19f2288ea82274665fc323ad24cc994e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE