Behavioral task
behavioral1
Sample
27b84d6d63b5d447fa979df94806a57e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27b84d6d63b5d447fa979df94806a57e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27b84d6d63b5d447fa979df94806a57e_JaffaCakes118
-
Size
75KB
-
MD5
27b84d6d63b5d447fa979df94806a57e
-
SHA1
a274517608b22957f2f319e4fbed418a011e32b0
-
SHA256
bb9273bd9f0471860913196215dbb30b90289edb9c6c04b4e7fe30b7238f32a9
-
SHA512
912321fd7e2ee1441e256e9002d8dd7827745a10b76c73ff827efd0212e45155b2ca57f3260fe4bc31cd752336eb65808a1312ca5b21cec6d2761006c9ffdfed
-
SSDEEP
1536:KkXLWLl3klq8TZGJjvNdtgqamu00XnmdP/3ESRxoIkw8WkQTJCQE+RbwRunouy8G:KkbaklqAKvjSHmh/0mV/9JHE+RbwRuoR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27b84d6d63b5d447fa979df94806a57e_JaffaCakes118
Files
-
27b84d6d63b5d447fa979df94806a57e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE