Static task
static1
Behavioral task
behavioral1
Sample
25124a5231f98f8f3fce2a2e1e281f04_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
25124a5231f98f8f3fce2a2e1e281f04_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
25124a5231f98f8f3fce2a2e1e281f04_JaffaCakes118
-
Size
2.2MB
-
MD5
25124a5231f98f8f3fce2a2e1e281f04
-
SHA1
6547ccb56cda8f60b2e9dac2a1ed9adb6cb228d6
-
SHA256
009051f23886c354c042ab31f408a4318707a8307ca4fbe9215b54ce54e0cbfd
-
SHA512
a30a0a17b087945bb633a213750689e3842dc597cf7a3dcc9c7d8d35e9c4cae210beebe447ac54911fcb4cce7fd7bac4b5719d9945817c16599ff4bd01fa8a40
-
SSDEEP
49152:wY0iclftF4l1XyifsaYoYpurA14/8kHBngj4zvC5DN:wY0IyifsGYortEkH9gkjC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25124a5231f98f8f3fce2a2e1e281f04_JaffaCakes118
Files
-
25124a5231f98f8f3fce2a2e1e281f04_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1.8MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE