Behavioral task
behavioral1
Sample
26884cf515d584661b94d2a954638671_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26884cf515d584661b94d2a954638671_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
26884cf515d584661b94d2a954638671_JaffaCakes118
-
Size
199KB
-
MD5
26884cf515d584661b94d2a954638671
-
SHA1
c2e2a4a1e4d0d9e5ae674bee57f4d2e11032c242
-
SHA256
e4040003055bf5a67f003f8bde78b720b46de5d1e873c873d880baf2be4ee0ae
-
SHA512
56779fa294432203b1e53a39601e705f6e406bdceeed10ecf64ed19dff48cfc061efb537cb72c436d0bbb60e4b691ab09108516f1fcf7f555917f426a2668013
-
SSDEEP
3072:Mq5Y/CAwUUtWJWpXc+yBMhVkZr+u0B82zJ:qi9BcZAKZ0BVzJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26884cf515d584661b94d2a954638671_JaffaCakes118
Files
-
26884cf515d584661b94d2a954638671_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE