Behavioral task
behavioral1
Sample
f27747031f30fd1b197a67d89f7e7f67_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f27747031f30fd1b197a67d89f7e7f67_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f27747031f30fd1b197a67d89f7e7f67_JaffaCakes118
-
Size
821KB
-
MD5
f27747031f30fd1b197a67d89f7e7f67
-
SHA1
9f074b2ad4e668dfd24ce249c3da683605ab26ed
-
SHA256
e2870a74dc326e5e316b8aefe3efb415fe628c79ae7f4aa18ee5d088bfa42ce8
-
SHA512
53777cab7313d0cb16fafbf66096635e19ba2e3596e44b2a4c8a84439322bdce452ec0b7708687fb59bec4fbb9a7cf764611001eb155aae21e39ffefc5edd07c
-
SSDEEP
24576:Z5pd5dFQnN7JU+Gq9DjtU4Cg5MUwcjukL2CDYO:Z5pTdgN7JbGuj/CoMUwcakLz0O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f27747031f30fd1b197a67d89f7e7f67_JaffaCakes118
Files
-
f27747031f30fd1b197a67d89f7e7f67_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE