Behavioral task
behavioral1
Sample
25b7a8f80693b13038187a205c27a552_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
25b7a8f80693b13038187a205c27a552_JaffaCakes118
-
Size
6.6MB
-
MD5
25b7a8f80693b13038187a205c27a552
-
SHA1
6153af0adf695eaac22cca9a86cc40ca9f65e767
-
SHA256
cea11c772abf3a5014da21eab8e5ad1c3fcb6ce4f8997a53e18c9f272c6de1e3
-
SHA512
8d60f486a42f63e18a04e0f0606367710b47775d23a968a62849eee6f5df983c6451da9fe60bc6e5c71f20fe0cbcdcffe1fe5de764dcd4fb262e88a24ad979b8
-
SSDEEP
196608:F/c1e+DGTJ5Q+ICXHqNFIv7wwPgsy52f21:F/+aJGIgF+7wwNyIf21
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25b7a8f80693b13038187a205c27a552_JaffaCakes118
Files
-
25b7a8f80693b13038187a205c27a552_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 10.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 511KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE