Behavioral task
behavioral1
Sample
cfcf09e7211e3a44012b897a0f4363c7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cfcf09e7211e3a44012b897a0f4363c7_JaffaCakes118
-
Size
784KB
-
MD5
cfcf09e7211e3a44012b897a0f4363c7
-
SHA1
f35508d0370de991ba61d331645b99fe2dbae4fc
-
SHA256
1a2f0e9f51458dac7d12dde6387e51967a96f3f5513c581b494f656341b6a564
-
SHA512
d644d0958ea068dab3fba31776bdcef7aa9d0e495089e5c22a9050fd28a409734f391533b25b128b22a9aa3f05d5f147f91edf00370db62016fb5d12c7310342
-
SSDEEP
24576:2dkjuCHi+qqMrNrKYtfLtZdG9LJ+/ngmVkFd:2d+THi+qqMIczk9oIIk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfcf09e7211e3a44012b897a0f4363c7_JaffaCakes118
Files
-
cfcf09e7211e3a44012b897a0f4363c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE