Behavioral task
behavioral1
Sample
cfba81b9f3e5000e5ed7d7de552cf8b9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cfba81b9f3e5000e5ed7d7de552cf8b9_JaffaCakes118
-
Size
336KB
-
MD5
cfba81b9f3e5000e5ed7d7de552cf8b9
-
SHA1
8fa9965834fdad824ae8837c4fd63ee4019a3dba
-
SHA256
1a627266be6707ad6576b7641e1c5b2ec560fe90b7720ab2162942dbf31eb680
-
SHA512
783a7381cc60d24a348b2b67c2493ba01a360d599ab9a570f5590e1d2dbfc60288f548b4428d33d1f9578bd5335d0e96b054a015a1b0e09b92c9378e65a8ce41
-
SSDEEP
3072:Y8RhgAWIY3Lab00vUqZr97TeKgCxlfKx:793H5TxLDM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfba81b9f3e5000e5ed7d7de552cf8b9_JaffaCakes118
Files
-
cfba81b9f3e5000e5ed7d7de552cf8b9_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE