Static task
static1
Behavioral task
behavioral1
Sample
425ae31b9ad3547440c4caf43427fd62_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
425ae31b9ad3547440c4caf43427fd62_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
425ae31b9ad3547440c4caf43427fd62_JaffaCakes118
-
Size
35KB
-
MD5
425ae31b9ad3547440c4caf43427fd62
-
SHA1
898fc902a324ba1199d4a461e5c3b747306ec076
-
SHA256
1b61a8a7880e4cad6c3afb0941a9de4e43d456dfe6b01be908eac87527ad9d72
-
SHA512
2d1a0e7131cf859a58f82c7823fbd2059b6ac57499e3f2ad9c9a21aac64d7e6384b9fb28c018202884d09eaf276594b3a6de0cadfbf2a4945fd3a96060bcb6f3
-
SSDEEP
384:mYOW/WCLD6GOuhYk9EB7icA2IcQGUs9BtZxGAiQROHPcIsASGeCZgBAzvnKyxPxb:dPyckWcQGD9B1+c0PZWyUTLrkwIoGkz8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 425ae31b9ad3547440c4caf43427fd62_JaffaCakes118
Files
-
425ae31b9ad3547440c4caf43427fd62_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�d:0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�d:1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�d:2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ctwwLMV0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ