Behavioral task
behavioral1
Sample
426f0a107ec660d9a6001eed9c1311cd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
426f0a107ec660d9a6001eed9c1311cd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
426f0a107ec660d9a6001eed9c1311cd_JaffaCakes118
-
Size
179KB
-
MD5
426f0a107ec660d9a6001eed9c1311cd
-
SHA1
9cfa21907cb6ff6d4f3d0c9fbbbf38549fc5ea22
-
SHA256
cbfa727b88605da05d21b0e136acbe15534ed5b019291c78bd0f27ebe3700d48
-
SHA512
2823a91f45b1549cf738a51608158756e371457ee29294d39574b5484ec7c8dc1ddd76131ede6a88d06d47ea82413472c449a9ffce0892c21a2f2d477b430131
-
SSDEEP
3072:o54SXiTvOqzFpvLV7bYxPtJkAEwVBGuJf6HgpyyAhyo7REY23/PuKtoutn5k6MGG:o5FyTvOwpZHYx3W4ORXkoOVPuKtoSn5y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426f0a107ec660d9a6001eed9c1311cd_JaffaCakes118
Files
-
426f0a107ec660d9a6001eed9c1311cd_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 400KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE