Behavioral task
behavioral1
Sample
026af75c921e094b8e96a41c25dda2e1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
026af75c921e094b8e96a41c25dda2e1_JaffaCakes118
-
Size
395KB
-
MD5
026af75c921e094b8e96a41c25dda2e1
-
SHA1
d83822737deb7e4a35a80a32f5e54a7df1dbf699
-
SHA256
6b0105652dcf72063ef4a3dc48106aed0ebb25787ca97b686495617c192c97e8
-
SHA512
d1e19210b18ae8d7bddbf92016686d2bc899e9bcd6999b958ffeb9abf48ac7498422b2943f5ee52c153a370a766f7be38238c9a6a7c0eca698652cd7be7efef2
-
SSDEEP
12288:vjCW8fp0eyEADWA9eqrNxkOvx7X1yKYJ:WW8fdyEAyA9eKNxkOvhUK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 026af75c921e094b8e96a41c25dda2e1_JaffaCakes118
Files
-
026af75c921e094b8e96a41c25dda2e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
UPX0 Size: 512B - Virtual size: 728KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 390KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE