Behavioral task
behavioral1
Sample
27dd02f18d5bfd6699d1c8c6b30f5567_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
27dd02f18d5bfd6699d1c8c6b30f5567_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27dd02f18d5bfd6699d1c8c6b30f5567_JaffaCakes118
-
Size
156KB
-
MD5
27dd02f18d5bfd6699d1c8c6b30f5567
-
SHA1
be2eefd3f2e4dfdef3f4a4c6da1b7c86ca37e8f6
-
SHA256
5a1861a31d2921f1bb36b842b059f571d9a4c0384e73bf2a579e2ff6198c68f1
-
SHA512
f6af1088a897b63b74d1c55a3b0d6ba8af440511685b11edb7bd49d260130713f091af2268a267eda29191306322ac7c99d051090ab2f8b1c079993f1682b1ef
-
SSDEEP
3072:B4vVp2O/K9aFs1P6MXm/Tq+8p7Yuhz9Aje15swDCyQMUKBDSkB+vCAdqFej:avzu1CpenMExAa1DCyQMUK5ov/n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27dd02f18d5bfd6699d1c8c6b30f5567_JaffaCakes118
Files
-
27dd02f18d5bfd6699d1c8c6b30f5567_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE