Behavioral task
behavioral1
Sample
e27ccb7aa9afc7002d9b14255ca5eee5_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e27ccb7aa9afc7002d9b14255ca5eee5_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
e27ccb7aa9afc7002d9b14255ca5eee5_JaffaCakes118
-
Size
1.5MB
-
MD5
e27ccb7aa9afc7002d9b14255ca5eee5
-
SHA1
43a54fc1b28a9ee059da890769f2c2301d0c2b98
-
SHA256
bf0b17e08717e10171c915844c6240322e5bc3d0c3203e3611c7e48ac351764a
-
SHA512
ef5c818e637785dd92607a3a2a3704ba04848279201151ccfd6e07a7f7282fa4b1a0963327a8544b2440eaf289bae96f5a88e89332b7bf18d49788499bdacd2b
-
SSDEEP
24576:vW22Kw0eSq2iVGT+UFIb0m0x6ztI7NAg68gNKtaD/KCCW:vW2NZq2iV8T5m/ZI7NAgxAqaWX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e27ccb7aa9afc7002d9b14255ca5eee5_JaffaCakes118
Files
-
e27ccb7aa9afc7002d9b14255ca5eee5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE