Behavioral task
behavioral1
Sample
cfa14ea56d84595f92556f67fed64c67_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cfa14ea56d84595f92556f67fed64c67_JaffaCakes118
-
Size
473KB
-
MD5
cfa14ea56d84595f92556f67fed64c67
-
SHA1
d92cfc5a6ee587da8f733fad0fc35efdcc89d353
-
SHA256
255a1b7e6df1c1dcea68676e5931d2d67b6b0a06dec83ea2cf0067ff7a9295ec
-
SHA512
b4d8983cd8c8f1f9cdddade383fcd57d11e1b2d8325417106a68cc70031a6429ea16f6194e497b0a9a41d09f471aafe65084cdb2fcbd675307434bfb004a1d14
-
SSDEEP
6144:q1/ESAp14hZepP4diKE1g+dJ+UfiqCejl80ONg25FSUo9vnlZM3HVm7Y8bWJBEp4:VukQ/E1XJNcszONyUlwY8+toSTQ6f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfa14ea56d84595f92556f67fed64c67_JaffaCakes118
Files
-
cfa14ea56d84595f92556f67fed64c67_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 836KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 368KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE