Static task
static1
Behavioral task
behavioral1
Sample
25c6a6f8f03856d5877673f5c9cccd03_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
25c6a6f8f03856d5877673f5c9cccd03_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
25c6a6f8f03856d5877673f5c9cccd03_JaffaCakes118
-
Size
70KB
-
MD5
25c6a6f8f03856d5877673f5c9cccd03
-
SHA1
1e83b4931ddb98127cf3ea74da87653ebfde8854
-
SHA256
c49c2451b29ef19570e24e70efdaea047f313a8e55a5d791e40326dd16a37c78
-
SHA512
7f94cc60a9113d0578add3af16af9a2914ec9a2ce596f65422b7b4562d57f31491f8915426f7e4c66d9bf6984fab43f4657378c7810c6ae8592fef8c42ea83e3
-
SSDEEP
1536:xcdzr3Sv1inCZV918ywd4vYUboNZ0Q2oKHxkYzdslapdz:G1r3Sv1i21w+YUboNZZLExkYzd44
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25c6a6f8f03856d5877673f5c9cccd03_JaffaCakes118
Files
-
25c6a6f8f03856d5877673f5c9cccd03_JaffaCakes118.exe windows:4 windows x86 arch:x86
3e3ef1ae49696ec78ceead626add363e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetTickCount
lstrcmpiA
CreateFileA
CloseHandle
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetTickCount
lstrcmpiA
CreateFileA
CloseHandle
Sections
.text Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE