Behavioral task
behavioral1
Sample
26b903f5695fab3174eeef86347c3474_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26b903f5695fab3174eeef86347c3474_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26b903f5695fab3174eeef86347c3474_JaffaCakes118
-
Size
25KB
-
MD5
26b903f5695fab3174eeef86347c3474
-
SHA1
7f968086a1a9dfa72172ee0c8737f7a782c63a6c
-
SHA256
546437fe44c250b5965dcb2aeeed8b20d7a4d2f4234ae4f4984f4642647c4c47
-
SHA512
0866e6f186ee18313413a5e8994bdafb60f7bcea9d1eff56d62e65f823e42f5f022d42e1f7ef6eac74fd3ab0b66e53d5ec7a47a137deb8e95ff0cb20617a075e
-
SSDEEP
768:7nzn5B5eQbkRY23n0psxeobT8lsU2hK2n8BNiSmsibMBf:7nz5B57o223+GeobTOsU2hD8BvZTB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26b903f5695fab3174eeef86347c3474_JaffaCakes118
Files
-
26b903f5695fab3174eeef86347c3474_JaffaCakes118.exe windows:4 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
UPX2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ