Static task
static1
Behavioral task
behavioral1
Sample
25d4ec39b2c37a518fb828d8d4a5af3b_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
25d4ec39b2c37a518fb828d8d4a5af3b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
25d4ec39b2c37a518fb828d8d4a5af3b_JaffaCakes118
-
Size
119KB
-
MD5
25d4ec39b2c37a518fb828d8d4a5af3b
-
SHA1
0012bdd06e778dbda4e557b97198eddf6d3c5580
-
SHA256
b5a9995cbe9c3a77d87f46167c05f97beb2935ee66bfd9bcd2355e29196374af
-
SHA512
87ee6149eba9a8e7e2d23c470080581a8226f1f05ba978a78072283545439d1a9a0fe2e05a45cd31b3716d778f49a69087df9d3733ddbb565990b74cbd6ff7d5
-
SSDEEP
3072:2+Sth4B/dL8kvaTdyyk4D+tIXAUoT1xAFIfUA:AINP+ycD5XS5xjsA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25d4ec39b2c37a518fb828d8d4a5af3b_JaffaCakes118
Files
-
25d4ec39b2c37a518fb828d8d4a5af3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
de Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
khawd7g7 Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w2dizyuf Size: 2KB - Virtual size: 377B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE