Static task
static1
Behavioral task
behavioral1
Sample
c25f4270fcf35a1eddbf362acd5a4836_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c25f4270fcf35a1eddbf362acd5a4836_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c25f4270fcf35a1eddbf362acd5a4836_JaffaCakes118
-
Size
18KB
-
MD5
c25f4270fcf35a1eddbf362acd5a4836
-
SHA1
5f604aca96294b191971dc537fff81d5d0bbfc3e
-
SHA256
ad11f6a2904618011a3e2c4ecd7b07e41f8c15baec6a6d873b1b1ca373a31393
-
SHA512
956ba07001b3df4ae75496dce8093ba25da5a5ed1988aadaf344130a287d68f9ca96e42203814c6df36e5670399ab95d23e40beb83023d500d37cd689dcbd64c
-
SSDEEP
384:XHbQnj59Mo+FElKUDldgUgHMUpb1DlTDW4humY/mzXWt06T/GiS:XHEnj5i3El/strTqZmY/mzz6rGT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c25f4270fcf35a1eddbf362acd5a4836_JaffaCakes118
Files
-
c25f4270fcf35a1eddbf362acd5a4836_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.lhgcegf Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.thfwqzt Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vtijitf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE