Static task
static1
Behavioral task
behavioral1
Sample
825c6012e514066dbeebc56f4e97c9c5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
825c6012e514066dbeebc56f4e97c9c5_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
825c6012e514066dbeebc56f4e97c9c5_JaffaCakes118
-
Size
59KB
-
MD5
825c6012e514066dbeebc56f4e97c9c5
-
SHA1
eb2f8ef6b8af096546f3add620e90d13919fa305
-
SHA256
06e016df18a4068053db13efbb63fa8a8d3850a587806247b7439c119c442723
-
SHA512
e68ab118f135357c918a9354f8857a22c8d8f7ae688e3c30e3b2f3a8b1cdedd95c6328eee76c75cb96c5743128a3a123c31b3549fee8b10b44924746d53ba67a
-
SSDEEP
1536:edmsuqPCc3WB88Z0JTQ7KXy+SRb8pbuEcra35dFLX:eu1c3v8Z0JTORmAEua35dFLX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 825c6012e514066dbeebc56f4e97c9c5_JaffaCakes118
Files
-
825c6012e514066dbeebc56f4e97c9c5_JaffaCakes118.exe windows:5 windows x86 arch:x86
b5c0892fa36495b498d09f7c10228f02
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
Sections
.whohuf Size: 39KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.olil Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gletmx Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ