Behavioral task
behavioral1
Sample
26ce21907b7a33acb57b02ecbfaf98d4_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
26ce21907b7a33acb57b02ecbfaf98d4_JaffaCakes118
-
Size
111KB
-
MD5
26ce21907b7a33acb57b02ecbfaf98d4
-
SHA1
4de7f099ecd9c9cec09fbfb3650860c5b348e138
-
SHA256
b125c134d75bc0d673b5c56687c4d25aa3045bdbf65194ccf572905839d722df
-
SHA512
b231177bcacbcf48d8ade326ff159780210b5271820881b2789842cb3224e00f9c862f96fa8ce75913da9088e5fb1dd10caa635bb21414a64ad1e764d139818c
-
SSDEEP
384:MIVi8kTSLcU/cAcMbximupXnScfZb8wPz:MIVi1SAW7cMcqSPz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26ce21907b7a33acb57b02ecbfaf98d4_JaffaCakes118
Files
-
26ce21907b7a33acb57b02ecbfaf98d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE