Static task
static1
Behavioral task
behavioral1
Sample
25e30cda9ea064d287d8cd152faeb1d2_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
25e30cda9ea064d287d8cd152faeb1d2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
25e30cda9ea064d287d8cd152faeb1d2_JaffaCakes118
-
Size
85KB
-
MD5
25e30cda9ea064d287d8cd152faeb1d2
-
SHA1
d10b0f4e7ec7163d1b2d1478e63879834b1561d5
-
SHA256
70da43e1d95b0de2157e3a33f1a62e5368ed899af18f491e548add7af4f746ac
-
SHA512
56be5b5f7d7efcc2e3883c5df6bade7a9fa835ac605f6f6bd68c9b4b2e431851b39e3bbf64a4467b64546dcaefefe7832a0de85aabdcfb9b4e052ad673d3921d
-
SSDEEP
1536:eDMowhQV/bCNr3+TgZz71yaV1p6LyaPLl6Zdb9XOEi4V/HWu+V:2wSbCJ+67gaqxPLl6ZdVOn4V/2u+V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25e30cda9ea064d287d8cd152faeb1d2_JaffaCakes118
Files
-
25e30cda9ea064d287d8cd152faeb1d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
.svkp Size: 51KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE