Behavioral task
behavioral1
Sample
27f660c84dd57816aedde65f019c7797_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
27f660c84dd57816aedde65f019c7797_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27f660c84dd57816aedde65f019c7797_JaffaCakes118
-
Size
154KB
-
MD5
27f660c84dd57816aedde65f019c7797
-
SHA1
716492e2bbc36f02f8fa57b62d3476470cabcde0
-
SHA256
1829e4d0c4a603efa03ba1db4dc315b19f6f6350df28a860738da7df85e084ee
-
SHA512
12d4e3c17c650f2a47c8076b6b9b5896925aedb93919573f0951401be48fe61ebfe9424da2e2070af7d98f67c8d06ae79c01e08a68b41adf19c8a632d017f969
-
SSDEEP
3072:fmAu7gTc4c4APm7Wa4yFTOiMPZY+ZSsrhWezvvIxouv2:fmh7n4cL+F4yT2ZY+IIhhIxoE2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27f660c84dd57816aedde65f019c7797_JaffaCakes118
Files
-
27f660c84dd57816aedde65f019c7797_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE