Static task
static1
Behavioral task
behavioral1
Sample
25c6fb83bfd0335b3d41c2c72bb30997_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25c6fb83bfd0335b3d41c2c72bb30997_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
25c6fb83bfd0335b3d41c2c72bb30997_JaffaCakes118
-
Size
100KB
-
MD5
25c6fb83bfd0335b3d41c2c72bb30997
-
SHA1
a67ee92d45d41ff4a6e2200f507785e75848ef95
-
SHA256
1a16f0bfde180829062a5005cc86ff5022587b5c8c75b2a3d5aa765898765ec9
-
SHA512
95b3f3eaea0c1ae1e4b04e31fe360e156c1363164052e6a21db216feec6a4ebe01d04cd7cf3f2517a6f20e5c55952a15a707d034bf4027bee6dc8f42fd8149ee
-
SSDEEP
1536:jXSVkMesv9KcoIJfQqc7gRHTxnhfSNojYmTa5wB81LwlJxnXhUb90SIdODlLA:jHMevcthdhfS+MmtJxXhy0S6ODlU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25c6fb83bfd0335b3d41c2c72bb30997_JaffaCakes118
Files
-
25c6fb83bfd0335b3d41c2c72bb30997_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 309KB - Virtual size: 309KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ