Static task
static1
Behavioral task
behavioral1
Sample
25e0e8957ac0921fed25113ae403a0f9_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
25e0e8957ac0921fed25113ae403a0f9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
25e0e8957ac0921fed25113ae403a0f9_JaffaCakes118
-
Size
22KB
-
MD5
25e0e8957ac0921fed25113ae403a0f9
-
SHA1
a948d9d01ac29071f1ccc8908c60fa177833fd01
-
SHA256
1a2a3b2c90b0e6f2a980bcff5bc0d31cca8a59b9560fe0af46564f2ed11b173c
-
SHA512
38faba5f834389ebd750e77af12c613709822d8f99f9c60e7709a8b1cad9a3fdc35f19060bb7335348676a4005499ba1ccea639b1cfce532a85918fa0556e0ff
-
SSDEEP
384:kZbqbEjc+DFais8L1oRWpCVtLVLXwbpzOUkp77Aafdjd7tdVKTPlwHd3jf:4bNjnZoRffLVLmKUinAMd7tdVKxwHd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25e0e8957ac0921fed25113ae403a0f9_JaffaCakes118
Files
-
25e0e8957ac0921fed25113ae403a0f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
023e1cb8e6ae0c2bd2a3de7e852d9f34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__getreent
__main
_impure_ptr
abort
calloc
cygwin_internal
dll_crt0__FP11per_process
fprintf
free
getopt_long
isdigit
localtime
malloc
mktime
optind
printf
pthread_atfork
realloc
sleep
sprintf
strcasecmp
strchr
strcpy
strlen
strrchr
strtol
time
kernel32
AddAtomA
FindAtomA
FormatMessageA
GetAtomNameA
GetCurrentProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetVersion
LoadLibraryA
SetSystemPowerState
user32
ExitWindowsEx
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE