Behavioral task
behavioral1
Sample
JaffaCakes118_cf6bc6cb00d4876ab0595e3d1c0abe7a.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_cf6bc6cb00d4876ab0595e3d1c0abe7a
-
Size
104KB
-
MD5
cf6bc6cb00d4876ab0595e3d1c0abe7a
-
SHA1
62531cd3e741007de0bf25aa6788b230dbebb2d2
-
SHA256
2e84832fd9d1c23ffd39778bb91fb6f07751aa11367d47a3e278c6a813376cb6
-
SHA512
ca84769f72add111567ac52904a850ba4850597b4eb16988431a24ff602c5cc079c4a847dbd787d3c0f9bfb1a08146aa425b498fbfa8a1ad56dc808d4a6ecf5c
-
SSDEEP
1536:ID/AwPx+riFFG1l/m3wEeQqjh+rmKVsWiVPsrhSBXUc/z:IDBYnFE2jwqWsWMfXnz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_cf6bc6cb00d4876ab0595e3d1c0abe7a
Files
-
JaffaCakes118_cf6bc6cb00d4876ab0595e3d1c0abe7a.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE