Behavioral task
behavioral1
Sample
25752b7cde0db036ded57c5b3f5cd038_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
25752b7cde0db036ded57c5b3f5cd038_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
25752b7cde0db036ded57c5b3f5cd038_JaffaCakes118
-
Size
5KB
-
MD5
25752b7cde0db036ded57c5b3f5cd038
-
SHA1
608108955af0ebf10b2ede2e8602dfa86bdda0ee
-
SHA256
1b311c1add3ebd219bc196ea9257188b4317e582db2b6f69c12ed363eca1f0a1
-
SHA512
4ba6d222326949be5bc90c1efa064dc6dbfeb1aa4764fd4d0f9dbc0a9c794590d1dfedba61238fed903a70298a961072c6e5dff5a3ef1a67692706c1b113db2b
-
SSDEEP
96:86zse/ybP6B2B+nHlBbzqRSA8WpvRlEsa5jbv9le+CMdL09B8VLCWhp4rLu0c:3sPbs2IFV2RpxRO9bHefwL0YBCWhpgL0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25752b7cde0db036ded57c5b3f5cd038_JaffaCakes118
Files
-
25752b7cde0db036ded57c5b3f5cd038_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE