Behavioral task
behavioral1
Sample
2725b1afaead5ae021d9418747096447_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2725b1afaead5ae021d9418747096447_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2725b1afaead5ae021d9418747096447_JaffaCakes118
-
Size
241KB
-
MD5
2725b1afaead5ae021d9418747096447
-
SHA1
23dbfa5e941a3a2391fd75c14dca54a28d3c0479
-
SHA256
112abb766de49015f8e82feabc22219172d333d02048185ec0f9c8b8272271ec
-
SHA512
40b311e7733a51978671bdd70ce1cbed9c22142ab798907f2e802d7199a5c5984b2f1425d69362a7b290fadf9fcb25ccd40c6fbd28c32763f724fb43e6dd6056
-
SSDEEP
3072:CO6kUhgWoM1lGm26kUhgWoM1/UhgWobKSCw2VTBRBemDBL0iItHBnG2dEdl/c5J9:Z1Kjl21K90B7RekYOl/c5KG0e/t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2725b1afaead5ae021d9418747096447_JaffaCakes118
Files
-
2725b1afaead5ae021d9418747096447_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA