Static task
static1
Behavioral task
behavioral1
Sample
25d3e8b91692d8683a2621f026946502_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
25d3e8b91692d8683a2621f026946502_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
25d3e8b91692d8683a2621f026946502_JaffaCakes118
-
Size
37KB
-
MD5
25d3e8b91692d8683a2621f026946502
-
SHA1
627d6191da310544800cc6eef72d957eaa5b3b6a
-
SHA256
02070b64152c01a887418f6966f31c4876a3039b7ad6f9831cb6c36dbef989bc
-
SHA512
dd31df11ce54eddf91dc58ac231b6c8c4dddc855048a22f22eb5237202a442e75b8bc86bc22231007b581bd00727ca1ed22fe7214762719790a2ae31e4018eb3
-
SSDEEP
48:qQEtsURpFMZkWJ+L6AikHM3+X3j79Bq0F:ghpwZMjs3i3NQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25d3e8b91692d8683a2621f026946502_JaffaCakes118
Files
-
25d3e8b91692d8683a2621f026946502_JaffaCakes118.exe windows:4 windows x86 arch:x86
72ecc8e6dd76de71941dde22e6d136f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ExitProcess
GetLastError
GetModuleHandleA
GlobalFree
ResetEvent
SetEvent
Sleep
WaitForSingleObject
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ