Static task
static1
Behavioral task
behavioral1
Sample
f25cb0a2281d51fea667c6756b265a63_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f25cb0a2281d51fea667c6756b265a63_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f25cb0a2281d51fea667c6756b265a63_JaffaCakes118
-
Size
50KB
-
MD5
f25cb0a2281d51fea667c6756b265a63
-
SHA1
857e10f2b40650a4264bcd6d47ebb0c8d7c0475a
-
SHA256
d00b5189bf94c0d40f5fb77461c5484e8920864d21692a241ad0422f0b343369
-
SHA512
0a25550ea0882e65ad64da63f874320fe56f4657dd86cae1241f7c0b3e041abd87e10a4b3726daf6c68fc46d76e5f777df95b2c88e9b401d597cde0f6ae94bce
-
SSDEEP
768:Wzq16n0k1qbY1haZ/QnA6WW3tuVrVu6SxXYQaetE/mmy564h8r:WKgf1iYvaeA6WW356R+E/heR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f25cb0a2281d51fea667c6756b265a63_JaffaCakes118
Files
-
f25cb0a2281d51fea667c6756b265a63_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE