Static task
static1
Behavioral task
behavioral1
Sample
25debf28702c72d47cdbb0f567da5b95_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
25debf28702c72d47cdbb0f567da5b95_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
25debf28702c72d47cdbb0f567da5b95_JaffaCakes118
-
Size
38KB
-
MD5
25debf28702c72d47cdbb0f567da5b95
-
SHA1
c1179cbc13b4a674a74ae916e77085ebc25d1008
-
SHA256
970872772afa6a98b0d4127837ad3600e2eedd05f9621f9e62e92f7bb8d0cbea
-
SHA512
c4df6f64e366ab5c5cdd94a081e5c5db88a10c1d71d064e50666362fd1be1445c5d68ddd32aa2a1f79dd171ea482cc4d6aa3ae9dbf8ce2ad8153636230505e9e
-
SSDEEP
768:jZf+IAzzae5b0I2/BzmMNAL631Es4MW06ERoy+9kPaVtRADClk:l+Bzh54zBzmW31Es3h6WSAa+Df
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25debf28702c72d47cdbb0f567da5b95_JaffaCakes118
Files
-
25debf28702c72d47cdbb0f567da5b95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE