Behavioral task
behavioral1
Sample
26917ee16de65e584af666a3a495f3ce_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26917ee16de65e584af666a3a495f3ce_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26917ee16de65e584af666a3a495f3ce_JaffaCakes118
-
Size
6KB
-
MD5
26917ee16de65e584af666a3a495f3ce
-
SHA1
80c08dc7c29ef5290add73ac1d433bba7d866689
-
SHA256
407eb22022aa648e05135d2b2f0d33575ed4dcd640bc8a1f0f5b659cb842e876
-
SHA512
d99ffcb7eb94465253084274a6d812d810a18c5f3728b765641cc306d5ec852356076a32af1be16d2b30a0eb1b837ed8027e0e4ef393b314d8b48d67978ad71e
-
SSDEEP
96:WsLTQKn8pTIjCNnR4bTU0QNuymp9JhkJdDJy7GXqrVX5MjqehQ5apR2Lw//x:QOiAMRQCExbkJyRVX7apALw/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26917ee16de65e584af666a3a495f3ce_JaffaCakes118
Files
-
26917ee16de65e584af666a3a495f3ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE