Static task
static1
Behavioral task
behavioral1
Sample
25b4beff41b021b6e7daf1cacbbaa749_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
25b4beff41b021b6e7daf1cacbbaa749_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
25b4beff41b021b6e7daf1cacbbaa749_JaffaCakes118
-
Size
954KB
-
MD5
25b4beff41b021b6e7daf1cacbbaa749
-
SHA1
8d79946a699f08175f70b1745f81e9aa19b9d0b2
-
SHA256
33b65f023e10b3a70c5f87ae0a18273168a4ec25e57452efc4e6caf565d2b0e5
-
SHA512
52338fbf43e3bb4c1b0d583e7eda06d53e69be134513d0cf10f0c26a02ffe6bc215fccb315142fe57739cee76b5b40cd291f8b3587d3e435d65080e1980d605e
-
SSDEEP
12288:SERVut4RuAwGgc7fNuIEGpgya+sNzaOvoJpaz/g/J/vVSnn:tuAwj2fNuIy+sNH8az/g/J/N+n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25b4beff41b021b6e7daf1cacbbaa749_JaffaCakes118
Files
-
25b4beff41b021b6e7daf1cacbbaa749_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DAStub Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE