Behavioral task
behavioral1
Sample
cfd2d0fc818798b52cec5d48ae5dae7c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
cfd2d0fc818798b52cec5d48ae5dae7c_JaffaCakes118
-
Size
23KB
-
MD5
cfd2d0fc818798b52cec5d48ae5dae7c
-
SHA1
487d4e3d07981eaaac961ece2a3797f860d6d4cd
-
SHA256
8b593b5635de3e893313f3d14da875b5255738b3843e1e8a9b2ab524c69a2e56
-
SHA512
f31e72faacf83d3a6239046eb2b83cec69981d46d82466ff83a4ea24c3ddcfa5e588c6bf76a1b5f33b5aa03592e1e2b2520d579040c76c8280940b97fe51a489
-
SSDEEP
384:mQkZbV8i+fIZFQyZpz0q7bYKkxRjK36ct14yvXbB75zY5NdlIv+aNJawcudoD7Ui:1GcAPQIpz0Mb18Kdt14yvLhladlUnbcq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfd2d0fc818798b52cec5d48ae5dae7c_JaffaCakes118
Files
-
cfd2d0fc818798b52cec5d48ae5dae7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE