Static task
static1
Behavioral task
behavioral1
Sample
025a94c8a82f94d872d4e22e9f3585ad_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
025a94c8a82f94d872d4e22e9f3585ad_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
025a94c8a82f94d872d4e22e9f3585ad_JaffaCakes118
-
Size
14KB
-
MD5
025a94c8a82f94d872d4e22e9f3585ad
-
SHA1
1f08ff63b7a19d3f60f3a0ad145740ef68720d3d
-
SHA256
13d30551e088b2bad6d81b70e8ff06c1aebf091dcd9abdf701950a89bb7a7c30
-
SHA512
d0e7dfb05ca8bf8929ea5563d642f15ac44bdda178506b7b7bf054edf50a6599b4093c2f3e630ba324c597c25944241261df09b56ef3a64929fcd681e3d428f7
-
SSDEEP
384:Ier06dMJA12wKSzVJhV/LEc/XVDzQBdm7TOOXZ/v:QOM+2jcVdD/5YkTFJ3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 025a94c8a82f94d872d4e22e9f3585ad_JaffaCakes118
Files
-
025a94c8a82f94d872d4e22e9f3585ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE