Behavioral task
behavioral1
Sample
19fd7e28aaaaaa6ab787ffd18051c707_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
19fd7e28aaaaaa6ab787ffd18051c707_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
19fd7e28aaaaaa6ab787ffd18051c707_JaffaCakes118
-
Size
350KB
-
MD5
19fd7e28aaaaaa6ab787ffd18051c707
-
SHA1
888666c0b040b4491c44a3bd93fabbf446c1b817
-
SHA256
c85c41ec2c1defca657a2f69e6fb560ced4418f34dc8c7253ffda5a6616661ca
-
SHA512
85169e3eb097d3a9daea3164c52757644e5473f6d9e3558f23dd44e36602598c4e48f3270f2356bf4d320d0ce1625210d8792bdd689704426c530bf4bc8239e4
-
SSDEEP
6144:KgtJZ0LVaeXA70fjw/FWT0HniXURGcY5dP0O1ZyoT5biEcvIwpWvYcvTBoSX7oo8:KgWPUkGiCGPd1woQN+doScg7e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19fd7e28aaaaaa6ab787ffd18051c707_JaffaCakes118
Files
-
19fd7e28aaaaaa6ab787ffd18051c707_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 279KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE