Behavioral task
behavioral1
Sample
cf5a8c34f89fee692dfaf4ec511b55de_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cf5a8c34f89fee692dfaf4ec511b55de_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf5a8c34f89fee692dfaf4ec511b55de_JaffaCakes118
-
Size
137KB
-
MD5
cf5a8c34f89fee692dfaf4ec511b55de
-
SHA1
f988cea48b6de2cdb9e8ffb4b6a967cc761e5bf3
-
SHA256
95b8bef903579a61650c7729da632a14805bf8b62570f6e39f8099e42211f7f9
-
SHA512
e47e12d4040825c32c001a37191396c32583ab05da415aa5c7fd19b45ea129b1a8967d6316b3e71cdeb85abbe75479c2c613dbbcc3d29d6df0144b6b34dd5657
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53Wt:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf5a8c34f89fee692dfaf4ec511b55de_JaffaCakes118
Files
-
cf5a8c34f89fee692dfaf4ec511b55de_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE