Behavioral task
behavioral1
Sample
25f173e6dc14e6cfd2aaf9a2620faaf4_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
25f173e6dc14e6cfd2aaf9a2620faaf4_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
25f173e6dc14e6cfd2aaf9a2620faaf4_JaffaCakes118
-
Size
19KB
-
MD5
25f173e6dc14e6cfd2aaf9a2620faaf4
-
SHA1
6b85b6f2cfc3178ac6792c0aabd91219bf7a5e85
-
SHA256
f8f414bae8f532e7a4f435a190bb97434a2d54a735510acc5b9f764306b5e689
-
SHA512
453b19e28a9098d319a669a5c20f2c60352e91a108498436fd8af3368e21e40597d08b9de95d2d250ce9102e31f53aab62f6baa1e91693d1b0a43749dfb3195d
-
SSDEEP
384:c8o0z3jtq0ljaXmo0f+NM3Jn70BfuJlYqUO4I3:cEr82XH5n/lYvVG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25f173e6dc14e6cfd2aaf9a2620faaf4_JaffaCakes118
Files
-
25f173e6dc14e6cfd2aaf9a2620faaf4_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ec6a573d2e74bf19d7546b3a6b639cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
UPX2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ