Behavioral task
behavioral1
Sample
25aa8bebc1a7211b375adf77876cf376_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25aa8bebc1a7211b375adf77876cf376_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
25aa8bebc1a7211b375adf77876cf376_JaffaCakes118
-
Size
21KB
-
MD5
25aa8bebc1a7211b375adf77876cf376
-
SHA1
4270b4b7ac396e7d4c846cf6f82e7607ef2e319d
-
SHA256
9b58c8fe67eeab1c5adb583c7c19fe51a2d03e5ad0beff84b8ef22ad699d8026
-
SHA512
a54314b0253982540ecbf3688bff1a2bbac93acaae7f2eadbfb7a1e67664f4e75153050b02e6ad47bc19f563c3cb14f8a4a64b65521d461ab05e817f99f0382d
-
SSDEEP
384:tJeuBUvCwB1yUyluoiLKx4bJGML54M02QDJ0dcGazdZkHWK9OaNJawcudoD7U0CI:tJfBij9LvJGML54MFQC+zdZ1K9fnbcus
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25aa8bebc1a7211b375adf77876cf376_JaffaCakes118
Files
-
25aa8bebc1a7211b375adf77876cf376_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE