Behavioral task
behavioral1
Sample
25c350ee955ab393241fa9223e526c3e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25c350ee955ab393241fa9223e526c3e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
25c350ee955ab393241fa9223e526c3e_JaffaCakes118
-
Size
37KB
-
MD5
25c350ee955ab393241fa9223e526c3e
-
SHA1
f9f9889c9b5d1de7718e85a7767aab5843695515
-
SHA256
990a4e20f559b8986d1955a1bc7f870525d571f7a486b15f40cf626e049e1e8f
-
SHA512
ebf10d6824264faa98ea95e2d3aff6696801ad5c82f07833a08e920d03285767823ee3acb26e7e2df999c4ff8c4285f6ff3ea91edf09e9ee5670162596d401b5
-
SSDEEP
384:Zr0FGMPCwH2L01f/BlS2+7Qa4kCgtUCeeVq:d0F7W+f/PSz73tPeec
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25c350ee955ab393241fa9223e526c3e_JaffaCakes118
Files
-
25c350ee955ab393241fa9223e526c3e_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE