Behavioral task
behavioral1
Sample
cf158015944d456f3be21a8f6ac1665d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cf158015944d456f3be21a8f6ac1665d_JaffaCakes118
-
Size
345KB
-
MD5
cf158015944d456f3be21a8f6ac1665d
-
SHA1
252286f83ed5af2aafc44061ab1683242b84e744
-
SHA256
ffeeac7d6b5956dde552bcb640a3b54cf869d121ab508d491a89991f32882c5b
-
SHA512
031539fc619be2427647bfc4fd5d89669b9bba1cc7188ff39e1c4821f5ed39849fc8c4bf53f7b092d9cc3c1a406dba3924b651ea0c5bc733eda95b7c65d826c2
-
SSDEEP
6144:AwsSydgr1jaXrd9/E0hIDP19bgr1wgx8ZSAC91dq62peaWBa8a2Ml9B4eHIeMpn:XrKdBE0Ojbc5USd912peakad9OeHkpn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf158015944d456f3be21a8f6ac1665d_JaffaCakes118
Files
-
cf158015944d456f3be21a8f6ac1665d_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 300KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE