Behavioral task
behavioral1
Sample
0b27ceb83c288b4b0447066ff0f1bb61_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0b27ceb83c288b4b0447066ff0f1bb61_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b27ceb83c288b4b0447066ff0f1bb61_JaffaCakes118
-
Size
531KB
-
MD5
0b27ceb83c288b4b0447066ff0f1bb61
-
SHA1
47ab93fad0b1ff0ca20f98a36fab987d47c69844
-
SHA256
f55120403b2917b0da14a1f96dc75d759ded99431f0f34b8a8b88694ce5c3a3f
-
SHA512
bf543b84b561d84c4088bac1da6f10ce0881455bb6e665cfa8adb7d8ad865cce47deb3a1bce0bdab16dc2682559d58d6bab3a67f065d9d6c0cbfa1fc69b89a6b
-
SSDEEP
6144:JIJ/N5GXadtcJeUth55C+pvCAcRcCmAH4ttI/wonOSTy19ZWZKUlx1fiUnH4mC5s:2f5GKEgUycvCcCN/wZTWZ5lLiu7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b27ceb83c288b4b0447066ff0f1bb61_JaffaCakes118
Files
-
0b27ceb83c288b4b0447066ff0f1bb61_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE