Behavioral task
behavioral1
Sample
26874f68306d078a2ff7160ae4f77d70_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
26874f68306d078a2ff7160ae4f77d70_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
26874f68306d078a2ff7160ae4f77d70_JaffaCakes118
-
Size
97KB
-
MD5
26874f68306d078a2ff7160ae4f77d70
-
SHA1
73c7226db46f3dc15e2bcfdbd066e7cf2e9a1627
-
SHA256
9ce9d1f973ccf0b45ee8bebe5b40692ca88720703168604f87cb954e4f77ed0f
-
SHA512
2ef0de24a4b236557ae24b1bcc04afe178af6d56e3ccb7090d0656927a5d421b387c254d02b9055c21ce0d682cfdb80da3746b35f6d40a9c359170cc2edd7722
-
SSDEEP
1536:D6qH5uSd209HWLVBdNTiBzk0sJgW4/2UBGdG+EW/Aht3SX+z4lIrgw50UF4YHD:D6qFB2hGB9NaOoW3SX+zLrgwJFLD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26874f68306d078a2ff7160ae4f77d70_JaffaCakes118
Files
-
26874f68306d078a2ff7160ae4f77d70_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 328KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE