Behavioral task
behavioral1
Sample
27e074f474a51a858831fadd145fd29b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
27e074f474a51a858831fadd145fd29b_JaffaCakes118
-
Size
2.9MB
-
MD5
27e074f474a51a858831fadd145fd29b
-
SHA1
1dd6eedfd0d53b23d2dd6dbc59200895deb2875b
-
SHA256
56d0bf256ee6dd9f5c04922369d3e998e73392cd1223b81124ce766bf0afd62a
-
SHA512
127060513c010a6d74375f85c4065e8353db9a82e77f6c48ba656b3566d476bc7b4cfeb835451c43dd72eb560b46e0067070d3538e5276028a928bbf904130d2
-
SSDEEP
49152:/I2InmbtM6qQv9//iKkaKOmc3b46Cfi9Baj8BBT4SfcsUjoh48TyMPkXdwkyZ:A/me6Bh3KOmcreaHau42c1joCjMPkNwv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27e074f474a51a858831fadd145fd29b_JaffaCakes118
Files
-
27e074f474a51a858831fadd145fd29b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE