Static task
static1
Behavioral task
behavioral1
Sample
25e09d65376af53d451ea00b9034931c_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
25e09d65376af53d451ea00b9034931c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
25e09d65376af53d451ea00b9034931c_JaffaCakes118
-
Size
92KB
-
MD5
25e09d65376af53d451ea00b9034931c
-
SHA1
05952d38cad0b0b9eaa1a114ba6c48d1929586c9
-
SHA256
2460ed660fe4102ada29504f8c90ddeb617b4d4de01532d218b1ae33e93200e0
-
SHA512
f73f552accce8c0f70c9b7a5e0dc9db5ddea17628b904d1ebe7f964b07aade8939ca7bb4d7d8a820b8ea3af75e26ff87968caee8766b0e050b439e419f3e18e6
-
SSDEEP
1536:7KK3lq5PBkzJGrxC9v0gCMo8JY+1S8VoqlKy/RPZMcpGH5M6LPTAvmAZTcDtkgX:7P3lq5PBKJV818JNBNlKy/RPZyM6/mmJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25e09d65376af53d451ea00b9034931c_JaffaCakes118
Files
-
25e09d65376af53d451ea00b9034931c_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 87KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE