Behavioral task
behavioral1
Sample
cf2ae1e31601100dc405f8126b1119f8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cf2ae1e31601100dc405f8126b1119f8_JaffaCakes118
-
Size
17KB
-
MD5
cf2ae1e31601100dc405f8126b1119f8
-
SHA1
d3b7fee0ddc6751b85c1aa30a1489b7c8aadf461
-
SHA256
1f9c66dbfd8c73976ab0a488e83e947ca721a477772b8edee29661916b0e3452
-
SHA512
6631ba627c594855ec0b429ccdf0a72078b13916c5dbedaaa0abe2ee1914dc8b68b099b39813b678d31b2bb6dec32b303698c2519f4c808ccfe6c89d2ca03234
-
SSDEEP
384:pLDTs8hsF6qtK8lzQ8+Sych3mYvCPHxdwQo:pLXVhaTtDE8VfCPHxdO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf2ae1e31601100dc405f8126b1119f8_JaffaCakes118
Files
-
cf2ae1e31601100dc405f8126b1119f8_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ