Static task
static1
Behavioral task
behavioral1
Sample
25fa661cb7bec718e1f4f731b3dfb10d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25fa661cb7bec718e1f4f731b3dfb10d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
25fa661cb7bec718e1f4f731b3dfb10d_JaffaCakes118
-
Size
164KB
-
MD5
25fa661cb7bec718e1f4f731b3dfb10d
-
SHA1
99ffbae9c1c45d335916ccd32147a3f14b31076b
-
SHA256
9c7f710dfd393a017368bbe4bf4f806a9cf5af6394bcc3e8c7de6a3ff6ca33c0
-
SHA512
6272f6e754cd6cf5a0580b30722a34481b81467a6108544cb4bc2f4da6f6e31aabfacb208ad9cb642595ab63913a13af7fd45e2b1dccbad1f96ead83961d5cf8
-
SSDEEP
3072:18whaRSGeCbnJ5CcrUXR8N0emVXWR31QBv4rW9c4XoDu+cHCH+TQAXwjqgJ2bX:18wkRCC1AXq0emte31b74Au+cHCeMqge
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25fa661cb7bec718e1f4f731b3dfb10d_JaffaCakes118
Files
-
25fa661cb7bec718e1f4f731b3dfb10d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 163KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE