Behavioral task
behavioral1
Sample
f27b9e9167aa46978f1d2a485a7a99a0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f27b9e9167aa46978f1d2a485a7a99a0_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f27b9e9167aa46978f1d2a485a7a99a0_JaffaCakes118
-
Size
302KB
-
MD5
f27b9e9167aa46978f1d2a485a7a99a0
-
SHA1
fd00ca4fb2a09a6848b9e4304354bfac6dc73ce1
-
SHA256
7b74711de2734ce1eed156a8284f05144222a02328eec088a8b0910426196f9c
-
SHA512
87370e10c8941f565fa86c5c01152aab4e99a7e06abc2868156408ba77ee5d17c43771098febd3d7a9285a6a5e0819886e3cc366c06da88326776c8a218311d4
-
SSDEEP
6144:TT7b3emWMJpK/yBff2EfgwlKqmxrB6wh7IBSP8mQ:39DBff2ygtTrbn8m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f27b9e9167aa46978f1d2a485a7a99a0_JaffaCakes118
Files
-
f27b9e9167aa46978f1d2a485a7a99a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE