Behavioral task
behavioral1
Sample
026b50f6aa1cb40a91c70365ced072bc_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
026b50f6aa1cb40a91c70365ced072bc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
026b50f6aa1cb40a91c70365ced072bc_JaffaCakes118
-
Size
284KB
-
MD5
026b50f6aa1cb40a91c70365ced072bc
-
SHA1
ee13cecc5a43873240c9175ebdd1d0552266f2c3
-
SHA256
3cbcb8a51cafc38eef91c5285b81f69509e4672618110d224bd6cfe68c18a17a
-
SHA512
a081fc2e0e84b38fe01577b4927c3864ab3d55adbf62eba5ed15449dcb3948269cccbb7eecf1a03524c6689119febb4be6b6293c806c054c5aa4e0943023dc02
-
SSDEEP
6144:/HhuGh2c5WoEHcm2rFSTWZH9UoNLrKcPPjWtrvu:/HwhI4qrFbZdDprVjSr2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 026b50f6aa1cb40a91c70365ced072bc_JaffaCakes118
Files
-
026b50f6aa1cb40a91c70365ced072bc_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE