Behavioral task
behavioral1
Sample
cf2e1ad8d9a21471364699ceb0934581_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cf2e1ad8d9a21471364699ceb0934581_JaffaCakes118
-
Size
533KB
-
MD5
cf2e1ad8d9a21471364699ceb0934581
-
SHA1
11aba2966b6f566ca76a75056c039d4d35415e98
-
SHA256
36a4f7b720f2d3fcbeaee41148e27c8f651af3b6cbd6a143a39fbf0426fc9404
-
SHA512
f44c921aed1d67f018768ed2b154771873ecdfc957a5e5075abe70760c9500e552a5d6fc37d8bd59ce2b81511dc5e07b1c9d4fafabb57c351f5f33a47d7f3c6d
-
SSDEEP
12288:+ZUuLe5/JtvB1Y3DVlTHk1d8uzjvVLGmm8Zc:+ZDLe5hpByHumufvVqb8Zc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf2e1ad8d9a21471364699ceb0934581_JaffaCakes118
Files
-
cf2e1ad8d9a21471364699ceb0934581_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 505KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE