Behavioral task
behavioral1
Sample
21026a590c61a190c2366950e40f24ae_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
21026a590c61a190c2366950e40f24ae_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
21026a590c61a190c2366950e40f24ae_JaffaCakes118
-
Size
152KB
-
MD5
21026a590c61a190c2366950e40f24ae
-
SHA1
d968be1590523ced7aad77afcbe45cc94e6de733
-
SHA256
60a0fe8149df4e9e5268445690ae17c00335c6586ea1408dc035479375b47699
-
SHA512
c85243ac3ca869344203527ad116e3f16a53e801b18782078c6557bad969ffb2681e7516ea70819fac9e9bd4d433c157967c36d4d6476a8cf3e70bd611f0c906
-
SSDEEP
3072:lSrw/wWMo4Wz1U5Vl6Losf+A+7d3p0vrPewAwEw0uU5nWBYiDoenx/B:orwt4Wz1U5Vl6Lo8ydZ0vywGiU5WB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21026a590c61a190c2366950e40f24ae_JaffaCakes118
Files
-
21026a590c61a190c2366950e40f24ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ikv. Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE