Behavioral task
behavioral1
Sample
26c994e464d8903aae5040f53ec85141_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
26c994e464d8903aae5040f53ec85141_JaffaCakes118
-
Size
41KB
-
MD5
26c994e464d8903aae5040f53ec85141
-
SHA1
23eb45367b8aeac44a9853313a6d4de358b092c5
-
SHA256
e02797e11708d4efec3fb58ca6c5b6228b8e50e98d1843fc17af1cba24d5a97b
-
SHA512
5f300e0c0debbfbaf279ca2d538408290f719cbbcf85e1594db5b4bfd8382d15007c57a7056d5e2b4ad15eac5f15fed753e92ec42a752b922e5e454f3d4e21ae
-
SSDEEP
384:xg1lqGB9fZen8O5MmCu0d/CKvK9gYAog1lqt6ZGb:xgj5pe901CKbogj86U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26c994e464d8903aae5040f53ec85141_JaffaCakes118
Files
-
26c994e464d8903aae5040f53ec85141_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE