Behavioral task
behavioral1
Sample
25aaf8211c46c45b9c441ae2270c82a2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
25aaf8211c46c45b9c441ae2270c82a2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25aaf8211c46c45b9c441ae2270c82a2_JaffaCakes118
-
Size
5KB
-
MD5
25aaf8211c46c45b9c441ae2270c82a2
-
SHA1
a28e0321f03c8782a374bb7de60cb1a271231065
-
SHA256
7e3fef07083abc9056aa15956989fcb5791608999c7e5c50e9a053850d998aeb
-
SHA512
cf5235f5ad2cd5f6e747accfc2b468f2ecc91e6acb90d2f5077ff8dbcf25b05794c515957020394a24c3f00b4756b5b0d537f77bc029e82ab3bdb040768c2338
-
SSDEEP
96:86zsSdQSxYdr6Aqcmq5p709DMNO61Jruju/p0z4wpX81pcECnpO5JJHR1L:3s5SYdr7rLp70dqdPSjkpH+Fk5PHR1L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25aaf8211c46c45b9c441ae2270c82a2_JaffaCakes118
Files
-
25aaf8211c46c45b9c441ae2270c82a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE