Behavioral task
behavioral1
Sample
27b4e0165d3e0e274f8c957b45a2ec81_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
27b4e0165d3e0e274f8c957b45a2ec81_JaffaCakes118
-
Size
784KB
-
MD5
27b4e0165d3e0e274f8c957b45a2ec81
-
SHA1
46bfe25f10970ea393cc6c8fef28d05049e8b011
-
SHA256
0b33ee3b0f048741c7b4b558559b76415347fb4474143cf017e5c52b37bf9173
-
SHA512
2bfe48c64f7103394d6e6c377ccafd44304184d73ebc684d8c66feecf13a36d2848b86e0e42189734732c4e42a8a08932e012722bd7237223328b16bc942b38b
-
SSDEEP
24576:d5ETxW59+B95aupNYo5BkWVMWnyLEHmDfAm4p:d5ixLBLauPYMGVKwAm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27b4e0165d3e0e274f8c957b45a2ec81_JaffaCakes118
Files
-
27b4e0165d3e0e274f8c957b45a2ec81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE