Behavioral task
behavioral1
Sample
b25c97e7cfeb273bcc8e3bdd960b3f85_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b25c97e7cfeb273bcc8e3bdd960b3f85_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b25c97e7cfeb273bcc8e3bdd960b3f85_JaffaCakes118
-
Size
462KB
-
MD5
b25c97e7cfeb273bcc8e3bdd960b3f85
-
SHA1
808a15bb629d7d5af94b86af313ea62fa604b77e
-
SHA256
a71f3b957edc88067841207e057d7ed8ae095f331ff0a1155abde47481f55c6a
-
SHA512
39db8f41a8440f35eb8e28cab4d84118014dcb4d2ef9a1f0ba42714a5d0cf439527bc558aa5abf23aa8dbe0a7bfb9f7a28d881d0f72f68c9cfbb12ff43be303d
-
SSDEEP
6144:jQmExpNp2C7sC+txHi60KdwRydaa4HAuRCs3LY9E06ltKBbjE+8cntZ4:jF0pNpZ7sC+35XyXaIlLY9E0UwBjln8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b25c97e7cfeb273bcc8e3bdd960b3f85_JaffaCakes118
Files
-
b25c97e7cfeb273bcc8e3bdd960b3f85_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE