Behavioral task
behavioral1
Sample
25fd8a47a092f191a2336a3cb8a9a1e9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
25fd8a47a092f191a2336a3cb8a9a1e9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
25fd8a47a092f191a2336a3cb8a9a1e9_JaffaCakes118
-
Size
18KB
-
MD5
25fd8a47a092f191a2336a3cb8a9a1e9
-
SHA1
441488a7dcc64e9c5d29be187f37128876a8272a
-
SHA256
117e27a54629e6bdc846211b222f17d66b6167398d1cb5d5b79ccc3dec4839d3
-
SHA512
6064037ec53904440a961bdee8af41cd22819e40cc21c938dec8a9b8d36395c8c57e5dd211c74f847c4303846490ab354eecc7b6ef54c3e6071bc54598392c3c
-
SSDEEP
384:rHU824HenHs7QzzNQ4Zdh93tC5UuTMza3CTCKlvZK7LD9KpV:rpcHsMhxJUSuTMzaSTCKlB0IpV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25fd8a47a092f191a2336a3cb8a9a1e9_JaffaCakes118
Files
-
25fd8a47a092f191a2336a3cb8a9a1e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE