Behavioral task
behavioral1
Sample
cef651da1b0da339bcf953259d65255d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
cef651da1b0da339bcf953259d65255d_JaffaCakes118
-
Size
101KB
-
MD5
cef651da1b0da339bcf953259d65255d
-
SHA1
0b030fb7ab452a6918c8be4b443c715b1ae85860
-
SHA256
9dce6ce5af64db6982d3d3afe835bc71a61bbba8f39dbf19256862264b4d5309
-
SHA512
7c3d7e28fead5df04512a50486e5bb6c78a4edb7847a59f6f88f04f524d3be557e0ce614a4dfbd527db38f8f23b431a16e621026dad156ae5b2cf96436a88e8d
-
SSDEEP
1536:65ty0fhuKA/mSfibYLOQ5V8IcOFh78mmO1HrDwuqavwTwOYMb3Uygi9I3fWYMg:CJuhuSq25VRpFh78m9DTwTw3MbkyFHw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cef651da1b0da339bcf953259d65255d_JaffaCakes118
Files
-
cef651da1b0da339bcf953259d65255d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE