Behavioral task
behavioral1
Sample
025cb70afea1ef934100712086bf49e7_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
025cb70afea1ef934100712086bf49e7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
025cb70afea1ef934100712086bf49e7_JaffaCakes118
-
Size
543KB
-
MD5
025cb70afea1ef934100712086bf49e7
-
SHA1
7ddf7fc077b2b12651fc3e4e88758fabd3b5e3d7
-
SHA256
627070317f1f9ae350813f5df5c9a23ce6c1fc5bb927a3da86460f7d0eef3242
-
SHA512
ead1813680e45c5e1b6c4b4e3e97e3729565b15e90506954d66a0ed9c279f5bb8f274f91f080c9e99b168001a2e72f1534e49e3882b34bc4cf0bf71682ce3efd
-
SSDEEP
6144:Kxd0r+zwr2rNy8daL6ku/GWSHaXCMMN+3rhmBF9Z9wBjux41SklZseYmyf1:+dHsr2rNv6aGTSIF9YUx4IuZseYlf1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 025cb70afea1ef934100712086bf49e7_JaffaCakes118
Files
-
025cb70afea1ef934100712086bf49e7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE