Static task
static1
Behavioral task
behavioral1
Sample
b25100b6e606996fbfb08890fe721c92_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b25100b6e606996fbfb08890fe721c92_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b25100b6e606996fbfb08890fe721c92_JaffaCakes118
-
Size
921KB
-
MD5
b25100b6e606996fbfb08890fe721c92
-
SHA1
20f327833dc8e772dd42b8519ead616c57d79c64
-
SHA256
4617d7ba17480b3b6d02abc0e060967f1772905471aff9be23b2095251a7bae7
-
SHA512
1c9f6adb9739896a3d167cbe8be2fe76e5d1a032059ba85c20b513bee02f7bc3aefbbeaa1426f920e09a1d835df576d5ab1b2a6df3a0d12a6dcc300274784112
-
SSDEEP
6144:zxUnSQMFf3m/bioH2UcrzCiMwNU9VgVsxI1GuW3iYUT+hnHYWV4Jfx6c769/cGM:BQMFeJWRCSNUIGxIbKc+hnDV4Wc769kB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b25100b6e606996fbfb08890fe721c92_JaffaCakes118
Files
-
b25100b6e606996fbfb08890fe721c92_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 588KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE