Static task
static1
Behavioral task
behavioral1
Sample
250eb64716c7c62464c01a94366c637d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
250eb64716c7c62464c01a94366c637d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
250eb64716c7c62464c01a94366c637d_JaffaCakes118
-
Size
29KB
-
MD5
250eb64716c7c62464c01a94366c637d
-
SHA1
ffb11cd021da7c1f50131887bee1947f68e954a0
-
SHA256
a8a48b64bc33c290c1b111c2823325fa04fa7dad4764b85e9c429506f6cdde60
-
SHA512
9a435d086fb44d21a0dfbaca06b0c6790b7a8a824b9cf9750d48f59511a7b426e2c0d123889a0143f91aa2a02a4ccaa0ec4d7762e1504782100e8079018dfdb0
-
SSDEEP
384:2w5Z4l9HVYIUCFZcDE4FNWSGSdcQcZ6WfB64C2JSMAXq69VWTuYzA:2MS9Qc4HWSZyQcf6WSXq69ATZ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 250eb64716c7c62464c01a94366c637d_JaffaCakes118
Files
-
250eb64716c7c62464c01a94366c637d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.CODE Size: 20KB - Virtual size: 32.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tasm Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dghjk Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE