Behavioral task
behavioral1
Sample
27e505498194eb6194451207f862a7e7_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
27e505498194eb6194451207f862a7e7_JaffaCakes118
-
Size
784KB
-
MD5
27e505498194eb6194451207f862a7e7
-
SHA1
f1f749d85fca497e07c7a5f0f573cdc73135a162
-
SHA256
254d2b8d3b89a427653beb26be3fdc577e36f08f0c248432c5f95137881bfe49
-
SHA512
cb450871be3f039c50f31f1fb04aa7ee605dc9131ad167627546c8fcd3759eb34d22d692be241ec71b7117bf74f77acb7a7ae0c8f83930d88a1f5313bc68af0d
-
SSDEEP
24576:ezX11oJA4AUAmuhEOlkWc4z/0qD+fML+SP:ezbcbNAmuSOs4zss+U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27e505498194eb6194451207f862a7e7_JaffaCakes118
Files
-
27e505498194eb6194451207f862a7e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE