Behavioral task
behavioral1
Sample
25b34cf95288813ea52a7069c66d79fc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
25b34cf95288813ea52a7069c66d79fc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25b34cf95288813ea52a7069c66d79fc_JaffaCakes118
-
Size
348KB
-
MD5
25b34cf95288813ea52a7069c66d79fc
-
SHA1
3bcb8382347f8d872fc2f4229f0cf6c4e09ba421
-
SHA256
b133ea29983a84c60aa534f1855f4c7638dcb27ee8be0444e4548f0b04cd2ea7
-
SHA512
af0a2407022e2705c28975038b0e4a423caac295632b1f5e6c3bbb9f47a76927708f7aeb263ddfa9a859c72c833ec1a66e6308e4e5adc5ab7dfb428eb97ce205
-
SSDEEP
6144:4BYuWmoO3hvutquUVRYdQXpup/kEX82JGtrZuH0QClgwkt/NxTjfQfN:4GuWm0QRVRdgFkEXIc0pg3xTk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25b34cf95288813ea52a7069c66d79fc_JaffaCakes118
Files
-
25b34cf95288813ea52a7069c66d79fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 506KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asddsds Size: 2.0MB - Virtual size: 2.0MB