Behavioral task
behavioral1
Sample
2c27eb14d3913be9a00d3fcf504c4cf4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c27eb14d3913be9a00d3fcf504c4cf4_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c27eb14d3913be9a00d3fcf504c4cf4_JaffaCakes118
-
Size
5KB
-
MD5
2c27eb14d3913be9a00d3fcf504c4cf4
-
SHA1
fe50746d9651c0389a21352219b5df0b0a9858e1
-
SHA256
d4e6c2caa727400d09170cd6d2b0e90aa80967467a67dff43ba434f8308b146e
-
SHA512
81b022fff6fa54d5f2c69f61e1b5cac5e7bf2b5e1507216ef968b67d3b329d9f16ffb42508479e45680a27361a91eddefcb7fcc71aee162c9e4bbadd62d1b9d9
-
SSDEEP
96:sJ+pHjdiCGByPdP0m3drBH/KPlDcOVQzxl1hR0nqwrK06KqU+LrgXG/LV+:sJeACGBE6m3pBHwcOVExLhJR0iD8XCV+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c27eb14d3913be9a00d3fcf504c4cf4_JaffaCakes118
Files
-
2c27eb14d3913be9a00d3fcf504c4cf4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE