Static task
static1
Behavioral task
behavioral1
Sample
25e94e3c1f56dac4c1842f7941857ebe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
25e94e3c1f56dac4c1842f7941857ebe_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
25e94e3c1f56dac4c1842f7941857ebe_JaffaCakes118
-
Size
93KB
-
MD5
25e94e3c1f56dac4c1842f7941857ebe
-
SHA1
7b79847c5b52299f5ea86520d3abad7573aa0dac
-
SHA256
aefd7edd623c4a7d249eeb5ec64391a0fbb8808ee98ef00013005c8d71d048fa
-
SHA512
f69fffbeb2037b2800b19bb311e21807c0bbfe8959dc2d276af13cfb3893f7443fab6b4439d12e13bc4e989fb6113c6055708d2abe5767d697e99eb177c7f043
-
SSDEEP
1536:p5QAEeWPJ3X7C67wiYXmwHmqED/wpKGLWK7gOtf69ck2+hAP1X+SqffeIONAqlWK:pKAEeUJ7C67/YTbcYKkW0gOF6Gk2+6P/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25e94e3c1f56dac4c1842f7941857ebe_JaffaCakes118
Files
-
25e94e3c1f56dac4c1842f7941857ebe_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ