Static task
static1
Behavioral task
behavioral1
Sample
a25627d9d8f920838f075d496a10ceda_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a25627d9d8f920838f075d496a10ceda_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a25627d9d8f920838f075d496a10ceda_JaffaCakes118
-
Size
66KB
-
MD5
a25627d9d8f920838f075d496a10ceda
-
SHA1
6f679a1c392dceb5ee23fd37778c818f092d2543
-
SHA256
97e346353f5f0b3828580fa18cf1917a7453ad5af800bbd3d636e5dbb511eb49
-
SHA512
b2fdef1e290838c497801a8382d3b8baa6cbfb88401ecd96eff944108e0ea285bfe94ef960c08ce9c0c8bc9e7970a48fce763e290af6448736f7565a8a2c1522
-
SSDEEP
1536:EXW19ByHz83z1opywV7yXDwc/0eKp0swriH50w5GUyuxWAhS:D7ByHYrTwMkjc+3yuRhS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a25627d9d8f920838f075d496a10ceda_JaffaCakes118
Files
-
a25627d9d8f920838f075d496a10ceda_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 58KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iiwn Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE