Static task
static1
Behavioral task
behavioral1
Sample
25e69aa5e0803301f2c7fb91a90d2f0c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25e69aa5e0803301f2c7fb91a90d2f0c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
25e69aa5e0803301f2c7fb91a90d2f0c_JaffaCakes118
-
Size
1.1MB
-
MD5
25e69aa5e0803301f2c7fb91a90d2f0c
-
SHA1
7296cf23cdffbdc1bd66b59a3efe05293e7e1d6a
-
SHA256
75dd1ceecdb2e022fa1d73eda026ed4ea84b2c510126d657ffc63601707739c1
-
SHA512
5b1e06331fb061d3a91f938f39bc5bdac8766d43b4d4f2e98e3e082ca3d61a11a8399d46e927efac6b2ccef8e4eef3f115c4ec42a978497fc5796fabed77717c
-
SSDEEP
24576:4ITg37BRW5AY5Pj58OOdnbdzQvvbF+KI+Mkb+biIujuDm:9T5jgDMNMy+GIs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25e69aa5e0803301f2c7fb91a90d2f0c_JaffaCakes118
Files
-
25e69aa5e0803301f2c7fb91a90d2f0c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 692KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Packer! Size: 378KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE