Behavioral task
behavioral1
Sample
27aefbd505948dbc3ac9ba17313bd6bf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
27aefbd505948dbc3ac9ba17313bd6bf_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27aefbd505948dbc3ac9ba17313bd6bf_JaffaCakes118
-
Size
97KB
-
MD5
27aefbd505948dbc3ac9ba17313bd6bf
-
SHA1
deafa70e2ce52a2a0aabb437adcfccbf255d4614
-
SHA256
86e94179447b0cf46681b13d1c647fe49821ec95653bb3ab2462bf45fce887e1
-
SHA512
e574fe9fbb753c2d7c69733c226a5cd2b4cffce172f5295bd472f0f8127d1cd30c34c037896025cc50d3f0823e7ab5bd23d80ab72182b9b06544bedb11085909
-
SSDEEP
1536:IAU9odt/MqC5OnCrI8841ELb9woMBc60FyI4/FeQNbUkms/Pfjb+9XO0l8b:z1tLUfELbGfq4cQCM3+pO2i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27aefbd505948dbc3ac9ba17313bd6bf_JaffaCakes118
Files
-
27aefbd505948dbc3ac9ba17313bd6bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 12.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7.9MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE