Behavioral task
behavioral1
Sample
26134f8ef3ccd8896c0149cf59d73381_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
26134f8ef3ccd8896c0149cf59d73381_JaffaCakes118
-
Size
17KB
-
MD5
26134f8ef3ccd8896c0149cf59d73381
-
SHA1
b98a965fff409bcf2fd955a32dccec4f05aa9cda
-
SHA256
6644e4b1f8887ba8766663d0a61795ccd1ff538574816216b1417222b2b4f0f4
-
SHA512
c84a2d87c874174ef9e86592b0f8c962d84b430b9920dd133b40bafc2a1b68b7dc93be82c1bd2da106505f5d02874b4ae8ab6f916ddf7e483f6a7fd536717cfa
-
SSDEEP
384:Q3/tYILUIWZVcTiMJAdrUPCaNJawcudoD7Ue:ytYeWsdjnbcuyD7U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26134f8ef3ccd8896c0149cf59d73381_JaffaCakes118
Files
-
26134f8ef3ccd8896c0149cf59d73381_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE