Static task
static1
Behavioral task
behavioral1
Sample
25d629b64c6c5221dd0bc77dddcd8a10_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25d629b64c6c5221dd0bc77dddcd8a10_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
25d629b64c6c5221dd0bc77dddcd8a10_JaffaCakes118
-
Size
42KB
-
MD5
25d629b64c6c5221dd0bc77dddcd8a10
-
SHA1
d629323a9b0b428dd6c0ed2bd54db6955b974fe1
-
SHA256
5d0ce91a84a6b65d3bf69cde623b3fbeee5f12f236ace9a2b9ffef9ad79753d0
-
SHA512
2e231997eaff490d8383b2e8bc513b473b27a2afc0d9c749a2a571502147f7790da197197ff793fa2a86240445a74889832a187a339c9ae8192cbe4d2e1b7aa5
-
SSDEEP
768:rdBSo0yjqEB0M0Ro55vomGIS91KejtiLEPqclPoRgpDoLFlj4jz:TFqgvoDIS91KejEYRPoOAFa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25d629b64c6c5221dd0bc77dddcd8a10_JaffaCakes118
Files
-
25d629b64c6c5221dd0bc77dddcd8a10_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE