Behavioral task
behavioral1
Sample
26b47e34afb23f858a1d6e632c73c833_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
26b47e34afb23f858a1d6e632c73c833_JaffaCakes118
-
Size
2.9MB
-
MD5
26b47e34afb23f858a1d6e632c73c833
-
SHA1
9a36e2972c2d526be6bbd364adc9ca8f60978cbc
-
SHA256
4e18944a9d35bf82927ae8bcdaa18d47c050d78de8e41b072b9ed1e1423ad56e
-
SHA512
971a80dee18d859194029a5f9ddd27f932fb87741ceb01fd1c023f628ea698a4d01fca3b1b23d111826de8d4eae4e81ca72c9df60fcf4fdcdc1e124ae195726e
-
SSDEEP
49152:NSIRP0jS0QCz8KTZQudhmzOMNN9Baj8BBT4SfcsUjoh48TyMPkXdwkyZ:IHQCzBDrcHau42c1joCjMPkNwk6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26b47e34afb23f858a1d6e632c73c833_JaffaCakes118
Files
-
26b47e34afb23f858a1d6e632c73c833_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE