Behavioral task
behavioral1
Sample
27d111ba350a705b9f969a6c111c1f33_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
27d111ba350a705b9f969a6c111c1f33_JaffaCakes118
-
Size
55KB
-
MD5
27d111ba350a705b9f969a6c111c1f33
-
SHA1
08e1a378afe133ca1992a69260a5d222c3592100
-
SHA256
a34bbea623cefe22d55d3fc462a20c7aa01bfbcc0625ea1fe42803ec79b70e0f
-
SHA512
e48f6b6fbe0a64c17c28a9df6446c617811d7363e2cf42c97cbe0bcd3860158426b1ef6ba7cda554a6014cdcfeb576baa97440d4c1af78154a78826f0e4ca172
-
SSDEEP
384:JlEuBqcqCpLszR+2pfXT6a+NYOiKIyw6F0N470eZw7Rc+CyTOu:IuBqXCpLszRX+mzgFCGpZw7RNxOu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27d111ba350a705b9f969a6c111c1f33_JaffaCakes118
Files
-
27d111ba350a705b9f969a6c111c1f33_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE