Behavioral task
behavioral1
Sample
27a14a94514903ee5d653721f3b1fb93_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
27a14a94514903ee5d653721f3b1fb93_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27a14a94514903ee5d653721f3b1fb93_JaffaCakes118
-
Size
2.8MB
-
MD5
27a14a94514903ee5d653721f3b1fb93
-
SHA1
7a1b2eee290bff2f66e584b0355be2a16b69337a
-
SHA256
621a212829d8bd821b39c1541046eed71e382d1bfb6ab62979bbf5c5f1aa361c
-
SHA512
80d0674761713d1038aa30f2cdd76166526a0680bbc32be41b721079cb2c64c6235f1408365e87eb6fd2fb59f5418363451a81287186cf0f4fef791148cae340
-
SSDEEP
24576:3uhaqeZJ8NI8IO54BHeZJ8NI8IOurg2soUvqlcny71rsXv2Td2BHeZJ8NI8IOGXK:Ym8/8IrVUvvy7qeTdF8kXOz8hcr5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27a14a94514903ee5d653721f3b1fb93_JaffaCakes118
Files
-
27a14a94514903ee5d653721f3b1fb93_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE