Behavioral task
behavioral1
Sample
b26ad15ff6c77d8d0efcd1f227fad88c_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b26ad15ff6c77d8d0efcd1f227fad88c_JaffaCakes118
-
Size
7KB
-
MD5
b26ad15ff6c77d8d0efcd1f227fad88c
-
SHA1
dc97fa7759abea8625102e546b2cbbe29b9f6f3e
-
SHA256
164620a7233253ec3c5784f6ad72f9d7772b49fc30b1b8db6deb86d61359be7f
-
SHA512
7e299be160aed33244ef49e3b633853e1c8460708c843e7316144b03c53772dcb4d96e1308f87b85ef1860df042de99b0b01bd19e87917d87f6ae7d4b0175d52
-
SSDEEP
96:RTzlDmtX/Spd7R+ghgKHnDDyJFune7YpolbUKJyl3ctedWV24vPL9t:RTyX6bz6OnDOJ+hdWs0Ph
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b26ad15ff6c77d8d0efcd1f227fad88c_JaffaCakes118
Files
-
b26ad15ff6c77d8d0efcd1f227fad88c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE