Static task
static1
Behavioral task
behavioral1
Sample
25eaf0dfd18a4646e444624ffff7c212_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25eaf0dfd18a4646e444624ffff7c212_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
25eaf0dfd18a4646e444624ffff7c212_JaffaCakes118
-
Size
21KB
-
MD5
25eaf0dfd18a4646e444624ffff7c212
-
SHA1
c8b116b7c943775ef0d4e70d5b93e6c07e8dba76
-
SHA256
44a767dba62f0a7914f9509195a7a13b57ca8c0cab62a54e5a0cd600582146ae
-
SHA512
4317f3286baf0f4e76ff576f11c50de3054f53d92f8efa9dbeee725d2128c686ddfe1277e4f0b2e0e46281c751f6ce59c9f097c4e12febda6c99bb508d13941f
-
SSDEEP
384:xGFbdE+PKq6DDhXx6lqUw5V75+XECGILP4VO8H25V0bdPqxvJ27N:xGTaxD9XccUw595+XErY4V3HaKJcg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25eaf0dfd18a4646e444624ffff7c212_JaffaCakes118
Files
-
25eaf0dfd18a4646e444624ffff7c212_JaffaCakes118.exe windows:4 windows x86 arch:x86
85acd8b82751c1aeca12b8faa4592ee1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
MessageBoxA
Sections
.polo Size: - Virtual size: 84KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.polo Size: 20KB - Virtual size: 24KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE