Behavioral task
behavioral1
Sample
cf13295feeb24c786a784129f44becf9_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
cf13295feeb24c786a784129f44becf9_JaffaCakes118
-
Size
784KB
-
MD5
cf13295feeb24c786a784129f44becf9
-
SHA1
558b04a7d43d5d9623882fa88a6d9f15020f99fe
-
SHA256
60ac314e3dd44e177ebb08ac5b67d03f91869a743a09ed860783c0256066c412
-
SHA512
a5328314679814ca875cec3551db72d71510d09257fb0dc6f1c67f2bd90e54be91be5add041c36d1428ad4eb46f04044fbaf6aefa9922d6476fff9340cfa1c23
-
SSDEEP
24576:XYz0DfK06CEsgNyIrM3mQy0STqhEaEgLZpje:Xs0Di6ERdrM2QlSuhbK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf13295feeb24c786a784129f44becf9_JaffaCakes118
Files
-
cf13295feeb24c786a784129f44becf9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE