Behavioral task
behavioral1
Sample
0271f5d2e92923b0de6669c541112cb1_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0271f5d2e92923b0de6669c541112cb1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0271f5d2e92923b0de6669c541112cb1_JaffaCakes118
-
Size
25KB
-
MD5
0271f5d2e92923b0de6669c541112cb1
-
SHA1
137eeacab6627654f42d95f5d0b8ca98c7cbf8d1
-
SHA256
75c9689376f3dfac1e7b74d8d868a7f615a1205a3d5ae053f91268ecdf97dfee
-
SHA512
d7731d3be1765bdecb6d1031b2fcc3d540083be07c40379f6c235a62dd4a5644f1677a88b9bb5ffbbafaddbc06808a08a1fa912474bc4d87ec07a10d174d3e4c
-
SSDEEP
384:Uiz02Af3OhZQsgz+9cvKvmamOiM9zQkxamrET+2zpoW6Mzb:Uiz0v9DzScGma/T99xFrET+2zpoWzn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0271f5d2e92923b0de6669c541112cb1_JaffaCakes118
Files
-
0271f5d2e92923b0de6669c541112cb1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE