Behavioral task
behavioral1
Sample
26969a0a80f4844d658fc297471039f2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26969a0a80f4844d658fc297471039f2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26969a0a80f4844d658fc297471039f2_JaffaCakes118
-
Size
918KB
-
MD5
26969a0a80f4844d658fc297471039f2
-
SHA1
ba776c9a9831d3845610f90f004d1a8dd846c186
-
SHA256
70ec709bb4e4237b0fea4aeb900dc31e1b6f0435101d340aee657975a6fe4473
-
SHA512
b9eb4cabe61c77e627ee1c4a4ce29e50501c8118940ddf33f10ca1d1d4ff842a3c671e54e80b1c5e63e0011c86456adee83a5726c600a5da8cb48d463067b6b0
-
SSDEEP
12288:A6KyDaW+2lVxOuW7DmTU6oGo7dBOTOLJcNOOBPtsObA470uCtmTU6oGo7dBOTOL1:qQlV1RTFoGohUiOp6Ok47tBTFoGohUi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26969a0a80f4844d658fc297471039f2_JaffaCakes118
Files
-
26969a0a80f4844d658fc297471039f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE