Static task
static1
Behavioral task
behavioral1
Sample
25f6812f812b434afa2e94d7d9f98bba_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
25f6812f812b434afa2e94d7d9f98bba_JaffaCakes118
-
Size
393KB
-
MD5
25f6812f812b434afa2e94d7d9f98bba
-
SHA1
40091d9012a05cced2b2c0ac6597311939b6ffbc
-
SHA256
4fc41a27127bc478d7466fe4290816e6de762bcb639992078c473c06301cf269
-
SHA512
17368da02eb9df304a715e1668932e64adf0022bf4db99c18165e8aaecbb46abbce915bf084b7cb8b0c720da1c1a917e31711558a2dd71b14c45fb248e8684eb
-
SSDEEP
12288:X24FDxCpXmWEn1y2E2SuKzD+dY7IeoZ8zSTU:TwpofEbuY+2cRU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25f6812f812b434afa2e94d7d9f98bba_JaffaCakes118
Files
-
25f6812f812b434afa2e94d7d9f98bba_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ