Static task
static1
Behavioral task
behavioral1
Sample
25882e4b090047ad37910827089bc654_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
25882e4b090047ad37910827089bc654_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
25882e4b090047ad37910827089bc654_JaffaCakes118
-
Size
139KB
-
MD5
25882e4b090047ad37910827089bc654
-
SHA1
3cdf158caa98e503a1745857d79a172a3aa3f34e
-
SHA256
cba9821fe7903b8c39f40a371dafe192029484aa8d2f347e85160913cffe1f29
-
SHA512
480d9fa292a74380dd423d04ef59335706f7f65da37927564577800bd7347566854516683754deeaf271a7e7e84c8a64688b76151233beea729dd60b660fdc60
-
SSDEEP
1536:P+IkdgObCsoBTaGL5mb7xU5I/RAGA5CFY31UbGVDYpq/MukxrMu/tPCMui/:2IX5soBTbT5Ifa9YZfx4c9jx/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25882e4b090047ad37910827089bc654_JaffaCakes118
Files
-
25882e4b090047ad37910827089bc654_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
??????? Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE