Behavioral task
behavioral1
Sample
cfca2ceab503aa51f94a38e89f3aad2e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cfca2ceab503aa51f94a38e89f3aad2e_JaffaCakes118
-
Size
189KB
-
MD5
cfca2ceab503aa51f94a38e89f3aad2e
-
SHA1
3a5b82d883c00870a216b9457e0e026ebf7b6ef1
-
SHA256
468e52d53851569c8ef3dfa7165aa95fbedbcb6533cd836c4776a05278c8c8bc
-
SHA512
9727e137bc34d5ca5ab79e10c18c36dfcee4feca37084ef59232d5dd9d5e6ff515d563881de9bad8116ce1d6465e0c391713b6277c4dd9923e3cd5cb55d3836d
-
SSDEEP
3072:kCjhvYURsWfIdsWdDsT26yPETFW61BkFPNWg:km57sEIrx1PETFWI8I
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfca2ceab503aa51f94a38e89f3aad2e_JaffaCakes118
Files
-
cfca2ceab503aa51f94a38e89f3aad2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE