Behavioral task
behavioral1
Sample
25141a57eec6bd0c787e0983af6238ec_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
25141a57eec6bd0c787e0983af6238ec_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25141a57eec6bd0c787e0983af6238ec_JaffaCakes118
-
Size
48KB
-
MD5
25141a57eec6bd0c787e0983af6238ec
-
SHA1
4e26baad016aa91ebda98321828edfe1a0fda386
-
SHA256
d0db750ab82a58ad70b9f0a228604c5d903b7bcf1e5746391a17f921e86ed1eb
-
SHA512
e2d1011f6da7106d7d7482d2c8abf909d0a3afa1a511d575817343013f583170dd4a1ce70b08b4a2cf098a3466135ae3f2257d55ce8e27b55a82c320b0754225
-
SSDEEP
768:1UBDWU5hXE5tmDeo2hBJpGJV8qRl1VvT30Dq2k+J9x:UDWUw5tmTqGJVxj1lT3QqsJ9x
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25141a57eec6bd0c787e0983af6238ec_JaffaCakes118
Files
-
25141a57eec6bd0c787e0983af6238ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yvs Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE