Behavioral task
behavioral1
Sample
26a73d0d26bfde8245e112e204519244_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
26a73d0d26bfde8245e112e204519244_JaffaCakes118
-
Size
83KB
-
MD5
26a73d0d26bfde8245e112e204519244
-
SHA1
9862df84c446313a5821cdcd4bad554aec48d768
-
SHA256
adf7d615e49c759f0ab5a82371f45002506743ae9673b9704ddea3b2333213b1
-
SHA512
246a059642bee911a66400c4c65db230ed0acaa098f4e37f1bfb6e91538f8dfa92dc4f845a7b933831bcd762de79e318785cdd6f01fa49e796045a438db19223
-
SSDEEP
1536:l5c2oYl73FwzDiHhTYVTmUEmBcN2rLB/konkxawjwn5BmmW8DwGLfdCnouy8hH:l5Poc3F8DQKRdBcN2rOoktjIHWQdTdaD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26a73d0d26bfde8245e112e204519244_JaffaCakes118
Files
-
26a73d0d26bfde8245e112e204519244_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE