Behavioral task
behavioral1
Sample
cf411a2db1b4edaee7a7a609e9a194ac_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cf411a2db1b4edaee7a7a609e9a194ac_JaffaCakes118
-
Size
123KB
-
MD5
cf411a2db1b4edaee7a7a609e9a194ac
-
SHA1
29ec5f54193c76a6a68185a100ff2e0d67180dde
-
SHA256
eb1b51640639dd03fa15aadaec21e5777775c741f3e00d661c712b93d1cf964a
-
SHA512
3b08c43581a3d57e183db2f08bcde6aaf3264982f76430de099887c17271f521f97333e713296545c54df6bdd9e49f6db1e59ee11be66c3e21b71ad708e5bf63
-
SSDEEP
3072:NeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLsNeC:NVYrJrOSsRwcp0l
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf411a2db1b4edaee7a7a609e9a194ac_JaffaCakes118
Files
-
cf411a2db1b4edaee7a7a609e9a194ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ