Behavioral task
behavioral1
Sample
cf1f887be3693884ec0cbed37210f006_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cf1f887be3693884ec0cbed37210f006_JaffaCakes118
-
Size
33KB
-
MD5
cf1f887be3693884ec0cbed37210f006
-
SHA1
6fc9525fadb94438b6c9699492cd883f109eef91
-
SHA256
bceff5f70bf1afc899505b1af6bccf119aacd5634fd8e6a902904665e70ccb36
-
SHA512
af18bc462678fc3b168c4a2688110b102f6c0abdcd6027930e4da0b4453f7d8f3751ffece50a8146ca363dd9ac129f60f6782086443061f8747d52552992771b
-
SSDEEP
768:6jF1I6EEYyVKKs5HhF1pyvucMZ5k4YwFHfnudto2f5:6jFK6daKYBhuurfka/nuI2f5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf1f887be3693884ec0cbed37210f006_JaffaCakes118
Files
-
cf1f887be3693884ec0cbed37210f006_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE