Behavioral task
behavioral1
Sample
27587f3c25afb3aa266ae85340ba14d5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
27587f3c25afb3aa266ae85340ba14d5_JaffaCakes118
-
Size
33KB
-
MD5
27587f3c25afb3aa266ae85340ba14d5
-
SHA1
2a0ab9c314b1873aa1f0b73fa1cae63188e6520e
-
SHA256
0229a4b30dd62992d4ef42f6db277fd508d894c0084148a1cf7d5694a75262d3
-
SHA512
4dab5958175bad0fe08062d743054a34f23c7777711e17ce209136560aa6cdd2f5fc5da587fe047aff26d1842d7c33c2c476a39435aecf2a62214123ba11014f
-
SSDEEP
768:rg1Ts+A71XUr4jkCz4hiRUytsNrwLksSgrcnbcuyD7U/L:rgyvOrgSIR3sNrUSGcnouy8z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27587f3c25afb3aa266ae85340ba14d5_JaffaCakes118
Files
-
27587f3c25afb3aa266ae85340ba14d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE