Behavioral task
behavioral1
Sample
27f018db250732fbdd7e3b5939dc77c4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
27f018db250732fbdd7e3b5939dc77c4_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27f018db250732fbdd7e3b5939dc77c4_JaffaCakes118
-
Size
2KB
-
MD5
27f018db250732fbdd7e3b5939dc77c4
-
SHA1
93b71c3821500ae33fba035c351e11538bfb1a03
-
SHA256
c478fab993751355e12258b724ee2ea2d1d2d54c3cc954c37a56b12589c05816
-
SHA512
be479ca57317b8b4fa7405448ad2df935c32d9b48fb2d8c73794c01008df4b6e96c7adf966dd980055616ebc816cbf58efd2d6bb8779f0afd3fc4d2103732d5e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27f018db250732fbdd7e3b5939dc77c4_JaffaCakes118
Files
-
27f018db250732fbdd7e3b5939dc77c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 655B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tqn Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE