Behavioral task
behavioral1
Sample
cdf6d43f1e8617647018f4cbfad2ecd8_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
cdf6d43f1e8617647018f4cbfad2ecd8_JaffaCakes118
-
Size
21KB
-
MD5
cdf6d43f1e8617647018f4cbfad2ecd8
-
SHA1
1624c0670ae3ec56360084bee6cbd01ca23012b7
-
SHA256
47d9d6ec34b07ddf0499c25fc99fa01c53a8feebdcb63dc2d8eeae1083977239
-
SHA512
3f1f6d5ced5d2d184d2eecef8e1dcd0fc9d00263ff1edc590468d6e5513cae5b5ebf24a7a8eb4836ad7b980a7f6040693774267059e82d117d8633be4fa442df
-
SSDEEP
384:LIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZXRinitaNJawj:LRGuY2P0Vo6r7SiAwyrMRjbbinFnbcu4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdf6d43f1e8617647018f4cbfad2ecd8_JaffaCakes118
Files
-
cdf6d43f1e8617647018f4cbfad2ecd8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE