Static task
static1
Behavioral task
behavioral1
Sample
25feaa275aef970483cb3f00f7dbdff4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25feaa275aef970483cb3f00f7dbdff4_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
25feaa275aef970483cb3f00f7dbdff4_JaffaCakes118
-
Size
1015KB
-
MD5
25feaa275aef970483cb3f00f7dbdff4
-
SHA1
2cb0b03b00415e317ec32932192daa687f4b3c03
-
SHA256
6a384f3ad10e37cae1fa65b915effbd7ef1ef2d05824bfa400f45502fd7e5d29
-
SHA512
0ec1a0e13bf9d2e1b22514660f5e5c0118131efbbe159de67fb203920974fd7d4ff92690ce849edb2bfd42e7730ef7fad248eb90a0d33fa3305070e87814c56b
-
SSDEEP
24576:nhzlBAEWUf/1Fv1jwVrjslvTXXVP8qAprdGh:nFlC5wNFvgebH/AFK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25feaa275aef970483cb3f00f7dbdff4_JaffaCakes118
Files
-
25feaa275aef970483cb3f00f7dbdff4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ezojbahq Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qawgvimq Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jvjoipqx Size: 676KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jwwdhniv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE