Behavioral task
behavioral1
Sample
cfe23ae1f423603875f0148a0d118589_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cfe23ae1f423603875f0148a0d118589_JaffaCakes118
-
Size
100KB
-
MD5
cfe23ae1f423603875f0148a0d118589
-
SHA1
61ad60437b8995a69b92bb6c7fe1f57d989c95a5
-
SHA256
276d72bafef61075fc905e112c93d28ed476e32f9ea2a0ad85d3329357e46c1d
-
SHA512
ad83916a522ee4a80e0cc23833ec2354452e40e34010901498ac09179ec6f0ba6d414320974b28aadbcd29a256904cfad5e6ab06082e9e8da01313bf05f329f4
-
SSDEEP
3072:ddSh+XcS7io6eiRVAJutAMfU3aKSAtUuo:6h+XceiEiRVMPJdCu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfe23ae1f423603875f0148a0d118589_JaffaCakes118
Files
-
cfe23ae1f423603875f0148a0d118589_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE