Behavioral task
behavioral1
Sample
26bc8f183998eff5b301041c36ea93c9_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
26bc8f183998eff5b301041c36ea93c9_JaffaCakes118
-
Size
94KB
-
MD5
26bc8f183998eff5b301041c36ea93c9
-
SHA1
3d82299347eaa95e859927e7905d37e4f3bf8306
-
SHA256
e216dc2705e76c753257c0ed627bacf215b9689607c635e8fe11fd70457504e3
-
SHA512
00ad1049da484697ff98c058728ef470e82b1b4af42c983bfe8c8877a15121d8f4a2150497da23536b4e3f77b94231052507712a2e79c72ae5c173fb6a53908e
-
SSDEEP
1536:3gkFtlOJm7KAFlK1Nzx2r9xWKA5Ig2N3HqlrSO:3gkFtEcS3Mr9x5Az0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26bc8f183998eff5b301041c36ea93c9_JaffaCakes118
Files
-
26bc8f183998eff5b301041c36ea93c9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE