Behavioral task
behavioral1
Sample
26cfa3fb5587ac804ab601d9d0dec197_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
26cfa3fb5587ac804ab601d9d0dec197_JaffaCakes118
-
Size
216KB
-
MD5
26cfa3fb5587ac804ab601d9d0dec197
-
SHA1
09254e34fa014b120bd4d17d577e54b9e78a59de
-
SHA256
7b4f2c7b76e0dea11ef5ff13b23765e47c628e4e6270311a1e8b5c19b71c593c
-
SHA512
1613e5c8e5db0f2534138a817406f55d9a5a0871ad0ac791f97b94d27a18fe3596bf387902be8c3acb3f0edc7695adb4aeebc562b19d54d540dd0902533ce370
-
SSDEEP
3072:XpPoqVOcNXkYYHoWjpiIumOb6t7IlDgvFkEqrFzUFl3Rc24HUTC6WvZtout:5h1JIo08RlO7YMrFxRclUu6wtoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26cfa3fb5587ac804ab601d9d0dec197_JaffaCakes118
Files
-
26cfa3fb5587ac804ab601d9d0dec197_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 436KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 213KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE