Behavioral task
behavioral1
Sample
25fb40dacd2d057cbb07a0efc5302c9f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25fb40dacd2d057cbb07a0efc5302c9f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25fb40dacd2d057cbb07a0efc5302c9f_JaffaCakes118
-
Size
130KB
-
MD5
25fb40dacd2d057cbb07a0efc5302c9f
-
SHA1
0155b927cdec8cfc27a1fe0c56db50f5369e0500
-
SHA256
1238fce9929362116607e750a605bab37a664b18f2a1fef2f856023fc31d2929
-
SHA512
1bbb45370ac1e54fc663f75793a18fa5170b23e08a1209f8491bc6ab6614d8dba969cdd2cdf3af6c27d6ae5ceb0ece76d2360705adef212523eea076311007ef
-
SSDEEP
3072:UiAlm507ZVeLu6aOVSMQ/yVGBmd2mSrm8Xd+v7qDL/1/Gz2tlLU:UiAlm67ZVt6DkbyUJvrhXdS7o7c2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 25fb40dacd2d057cbb07a0efc5302c9f_JaffaCakes118 unpack001/out.upx
Files
-
25fb40dacd2d057cbb07a0efc5302c9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 208KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ