Behavioral task
behavioral1
Sample
25dc42f31f9b8e36460e9bcf2021cafa_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
25dc42f31f9b8e36460e9bcf2021cafa_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
25dc42f31f9b8e36460e9bcf2021cafa_JaffaCakes118
-
Size
651KB
-
MD5
25dc42f31f9b8e36460e9bcf2021cafa
-
SHA1
26591650690610960bbc8f01fe1122b7fcfa3add
-
SHA256
4ae73f8b401b04dff9b9368eef00423feaa7a536cde51620caaac42f2b4cd655
-
SHA512
cb42c369fd3c5f5cb240662bc363a8ad68318b27d6d9f335af3268589d0af9f964e4ac5233b30dd73469ded028d274ec36a4f6507a669cd8b50144e0f5c86598
-
SSDEEP
6144:GWZfec9EbXDk6RkQKDrG1VVE+IwrG1VVE+ItuHOGrG1VVE+IwrG1VVE+ICuwXZJI:3ZWtI6RkZunuVO6unucYiZKTKwK0e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25dc42f31f9b8e36460e9bcf2021cafa_JaffaCakes118
Files
-
25dc42f31f9b8e36460e9bcf2021cafa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE