Behavioral task
behavioral1
Sample
cfafd168ebf4eb2b15b07e800ecb690c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
cfafd168ebf4eb2b15b07e800ecb690c_JaffaCakes118
-
Size
48KB
-
MD5
cfafd168ebf4eb2b15b07e800ecb690c
-
SHA1
bc2371e9d1ca21223423333bb015df1d2be1385e
-
SHA256
c65d518c388e4e76f8c55194012537fbdf29380852f12fccdc91beafb40273f1
-
SHA512
2786daa0bd75e2d536e2aa3d8a1019963cffb4a8f876655f783376405b5ec696d991f0a6ef0b704cff8ceca963d454a25ff5abf907c2f3f8a6d270e4206ba2bd
-
SSDEEP
768:CRGuY2P0Vo6r7SiAwyrMRjb4MWZOljSJZeflCX0QQyn9D8O/e++Yo5KpI52eszv5:kPcVo6r7S/rabY4OedCkQQREt+YoYS2L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfafd168ebf4eb2b15b07e800ecb690c_JaffaCakes118
Files
-
cfafd168ebf4eb2b15b07e800ecb690c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE