Behavioral task
behavioral1
Sample
e19234f444871f9e876e0d0191073bf6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e19234f444871f9e876e0d0191073bf6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e19234f444871f9e876e0d0191073bf6_JaffaCakes118
-
Size
144KB
-
MD5
e19234f444871f9e876e0d0191073bf6
-
SHA1
5241768012f50a2fb3e7b0cd46faabcd0884a94e
-
SHA256
d60ef18690c825552420afba8633f0d5660eca767d9f6a720a30e0929ce4cb11
-
SHA512
f24c30a86dcee2f6ae6ea90361de8d4256ea0b9165068599aebda5c7c340c498e19bebca52cd7ebd8aec89fca6c8f58b614e2b65ca4a7a58fd12de74b3ce4c19
-
SSDEEP
3072:AepqzPVA2K/YvbsFpsXE1TeQ10hE0i9ykNrVDcnv92PDCIfqdKQg90P:tpDAgF+2eQShri5rVDcnl4CdKQgGP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e19234f444871f9e876e0d0191073bf6_JaffaCakes118
Files
-
e19234f444871f9e876e0d0191073bf6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 933KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE