Behavioral task
behavioral1
Sample
25ab1b57e98f4fda3c6491f91725ff9f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25ab1b57e98f4fda3c6491f91725ff9f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
25ab1b57e98f4fda3c6491f91725ff9f_JaffaCakes118
-
Size
221KB
-
MD5
25ab1b57e98f4fda3c6491f91725ff9f
-
SHA1
85ce2851c9a184c5ec8e6863c2b19ccf3cbd8d4e
-
SHA256
f0975d1975bcc53d5ef0542cc7ed066bbc22d0c6ed4a9ba0b3e337422f9d35c6
-
SHA512
ee4949834dd451061317647594b104035c4c597ad615e028e6b59346631e67baa62e16481dfe2ecc8735d35ba3b2b90aa582db97128ea2eacaac837816772073
-
SSDEEP
3072:L9oIfwfJj3ji716JCxWCk6+HiWojmESDu3jYO/sOCmMZu1mXout7+O:LGIYRKUJCDk6UD8jYO/sbmMIUXoS7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25ab1b57e98f4fda3c6491f91725ff9f_JaffaCakes118
Files
-
25ab1b57e98f4fda3c6491f91725ff9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE