Behavioral task
behavioral1
Sample
0b26d2f41ed3f9fd3dc9b0bb626d6d1b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b26d2f41ed3f9fd3dc9b0bb626d6d1b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0b26d2f41ed3f9fd3dc9b0bb626d6d1b_JaffaCakes118
-
Size
39KB
-
MD5
0b26d2f41ed3f9fd3dc9b0bb626d6d1b
-
SHA1
d9dc3974ab1805336e4d61cf64933cc446985ca9
-
SHA256
df393961d1e2565a1b7783963cf00e36e4aa41c91d33a5fc03c86a7efad0c20c
-
SHA512
4e14717737612253dc626e718ae263fda0590aafa042f01a068b6f01606ecceb100cc04055fb2cd335a8feb659e00cbae1b15077051ea9c69fb4faa7d3c5d4d2
-
SSDEEP
768:mpUg4yB1pwXlxkra/QJ7RsBNowOEPsbbSAupwn4J4+PNMs13CimxwH4VvzT7lBTN:dny+XlIJ7RaNoJESbhn413NCCH45LTmc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b26d2f41ed3f9fd3dc9b0bb626d6d1b_JaffaCakes118
Files
-
0b26d2f41ed3f9fd3dc9b0bb626d6d1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE