Behavioral task
behavioral1
Sample
cf002ffc3d7111e41c4ed140cdf08400_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cf002ffc3d7111e41c4ed140cdf08400_JaffaCakes118
-
Size
1020KB
-
MD5
cf002ffc3d7111e41c4ed140cdf08400
-
SHA1
b98f70b5a879f3d57a5e2b6cfb46f48d9792aee7
-
SHA256
c378669981ce36270ab83cd0ba227da9843bb1f193e2db6234aa951a36821ab5
-
SHA512
a760e8fc9a84a3610aa2b0714964a53f0b2bb1215951ec9f7b99c0616bc37e0f2d4c979f92b0bfd8449f85b746163c2b668c2c689ebd50ca3a3744195d377cc1
-
SSDEEP
12288:Grx8ZQ5eZml/uKTNk7f+j9oo/Nqu/rx8ZQ5eZml/uKTNk7f+j9oo/NqC:UKhZmltNsfioinKhZmltNsfioi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf002ffc3d7111e41c4ed140cdf08400_JaffaCakes118
Files
-
cf002ffc3d7111e41c4ed140cdf08400_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 552KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE