Static task
static1
Behavioral task
behavioral1
Sample
425b712c8d29e0989ac901fcfa74ed3c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
425b712c8d29e0989ac901fcfa74ed3c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
425b712c8d29e0989ac901fcfa74ed3c_JaffaCakes118
-
Size
381KB
-
MD5
425b712c8d29e0989ac901fcfa74ed3c
-
SHA1
8b43613f97c499dba5f4ef63df2d0df8c6342cb5
-
SHA256
56a2c0439f373eedfce5d57a2c4efc493253cceaaa0273213eb1903ab94d524d
-
SHA512
d254d3dd1af06bc2c9d4472e45f02ba38c71fc5af81fdc234009394f531f56daa10d02719b2b3aeba24d86784e0bf91d750dc078c0c311c16c628d4a8895f2a1
-
SSDEEP
6144:p/PJbR7VMdFuOg8hdXn+EAdQQF74TJRsL0FHVypmLrmRjHfSh9FMcCmLSr9kZtE3:lH7bYn+EkxaJRMzMMbaL9IR+EsOaq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 425b712c8d29e0989ac901fcfa74ed3c_JaffaCakes118
Files
-
425b712c8d29e0989ac901fcfa74ed3c_JaffaCakes118.exe .vbs windows:5 windows x86 arch:x86 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 397KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yvs Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE