Static task
static1
Behavioral task
behavioral1
Sample
0c25b2eddff66fe924e57ab14acd6377_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0c25b2eddff66fe924e57ab14acd6377_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c25b2eddff66fe924e57ab14acd6377_JaffaCakes118
-
Size
193KB
-
MD5
0c25b2eddff66fe924e57ab14acd6377
-
SHA1
03b24ebf4e75debbf93c86af00f1e054c31a32c4
-
SHA256
76c765e8f5907a9cc10550fe8e26a421c8d933c603d9e71188fe8d2accf645dd
-
SHA512
cb3b1400a82f90a7eed8fd2fcf1a0c10e5e85e59039ed4268dd60f911805bc0f19b6dc22db274fa13af4cfa7e8cf72a5e5eaeedcc1f8f68b221b11d48c8cb428
-
SSDEEP
3072:9DfNAdUimsXXK6w0O3n2phNu5R7DKo3sRw/18:9DfCOiM6w002phAn7DKo3sRw/S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c25b2eddff66fe924e57ab14acd6377_JaffaCakes118
Files
-
0c25b2eddff66fe924e57ab14acd6377_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ