Behavioral task
behavioral1
Sample
26f1887f5e82276087283db266f68bae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
26f1887f5e82276087283db266f68bae_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
26f1887f5e82276087283db266f68bae_JaffaCakes118
-
Size
838KB
-
MD5
26f1887f5e82276087283db266f68bae
-
SHA1
4884fa478163606dcf3a1f1732901e11bad7c2a0
-
SHA256
f5585e81589665fc64e7f18c9281aaa35dfd6d40386fedebf6bf4a8aa1865258
-
SHA512
53f2efe3c8aa7cdf1c7924eb88797a166f79d05e34f48682b52ed5176b50d7720506fcc276249621ecd3d0f3d3c024f7c15da2fd391dd6d282fec7e2306f8eb8
-
SSDEEP
12288:jt0VPFfsKAkrbPlXhHANUTNqm0HANUTN8sD:SFksb1AmTsD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26f1887f5e82276087283db266f68bae_JaffaCakes118
Files
-
26f1887f5e82276087283db266f68bae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE