Behavioral task
behavioral1
Sample
0f27b38ce150c4812dd48490ac4eeb22_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0f27b38ce150c4812dd48490ac4eeb22_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f27b38ce150c4812dd48490ac4eeb22_JaffaCakes118
-
Size
170KB
-
MD5
0f27b38ce150c4812dd48490ac4eeb22
-
SHA1
f66e416ab464cfa1c7b62f82c5b62790cf1861a5
-
SHA256
dcc62d08eface5805f486db18eaf73aac13241d6fba3de5bd7ec5b15f2c59651
-
SHA512
533ddceeba0f3f10aa5c49e92ed5026c7e8b0ef118bc7a917720e571fabcf91292f28cd25f1c9c8a38a633e38ea7e1c1a4a389415a3c8332ecca8c089acbd29b
-
SSDEEP
1536:ptDmZw2+Td9BUHhtZYVoAKvPSWxYPxaEDjpFWhRtaAxcJV5603vZ1xOmKwyM:XKE3CHhPosoFGR8AM7603vZ1xvK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f27b38ce150c4812dd48490ac4eeb22_JaffaCakes118
Files
-
0f27b38ce150c4812dd48490ac4eeb22_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE