Behavioral task
behavioral1
Sample
25cea7314dc405e22f432905c5beb09f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25cea7314dc405e22f432905c5beb09f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
25cea7314dc405e22f432905c5beb09f_JaffaCakes118
-
Size
12KB
-
MD5
25cea7314dc405e22f432905c5beb09f
-
SHA1
77917e8517f803fe32a7d43bc7d2131b50af6660
-
SHA256
d8eb53d596007329b864105f0dd8cf4453b6d4f40c7bb620b52a0f6c35e12a3a
-
SHA512
5ee812e14133afcc5a672ec076cd150bc0efa999fc6f7b325472f82e33f613e16e9b4b4a7e0bef5e463f12f573d5c11a5bff9bd3746a8bb1fc7fb8a35e61343c
-
SSDEEP
384:5hpU8c7hvV4Ghc9Af/vhsiGJ41gs5yfYEI:5LUzNVTYAWiGJWn4YX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25cea7314dc405e22f432905c5beb09f_JaffaCakes118
Files
-
25cea7314dc405e22f432905c5beb09f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 446KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE