Behavioral task
behavioral1
Sample
25df8d28da25d94cc1faa95d91d9fb7d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25df8d28da25d94cc1faa95d91d9fb7d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25df8d28da25d94cc1faa95d91d9fb7d_JaffaCakes118
-
Size
761KB
-
MD5
25df8d28da25d94cc1faa95d91d9fb7d
-
SHA1
a48303aad0a98a6741bcfcab279529448f00caac
-
SHA256
d4403f62508c8eb93dbd895cf0d0e845f488bd8dfdd124d25a3a5a7a6f841ebc
-
SHA512
a662af7ce00f4ba90654a77aa5d39349ea69a63f4c1b9e27e39cc299a1879759bbc3d5bebb71365b7fe8fde0287d7197c6aca13174aaf49103a0c11e757ed316
-
SSDEEP
12288:jt0VPFfsKAkrbPlXhHANUTNqm0HANUTN8O1:SFksb1AmTO1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25df8d28da25d94cc1faa95d91d9fb7d_JaffaCakes118
Files
-
25df8d28da25d94cc1faa95d91d9fb7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE