Behavioral task
behavioral1
Sample
cf2b6e65312121b978d07852a32024c0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cf2b6e65312121b978d07852a32024c0_JaffaCakes118
-
Size
11KB
-
MD5
cf2b6e65312121b978d07852a32024c0
-
SHA1
a1e0ee3eb94234837f686e2cd2985733bf640719
-
SHA256
590846748b9e19a9320b5b609d274f2a783ae54158aed1ecf01374899e45ebff
-
SHA512
37776a3ccb9b60c8d346afc02307ddb0f665f4f614b95be449f6831641a2d9bcabb45571b5b71a05c4c124989091a68565d9751fb894f13eea7a04d1c4722047
-
SSDEEP
192:fYu0yLpECClBGYh0LEZrN8VkNLeegkCLnXbAu0oimUMIiZ2g:fYudLplC2Yh04ZrN8VkNKeHCLLAZoxX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf2b6e65312121b978d07852a32024c0_JaffaCakes118
Files
-
cf2b6e65312121b978d07852a32024c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE