Static task
static1
Behavioral task
behavioral1
Sample
c25a5686c25bcec993eb1ec2e503b6c8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c25a5686c25bcec993eb1ec2e503b6c8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c25a5686c25bcec993eb1ec2e503b6c8_JaffaCakes118
-
Size
49KB
-
MD5
c25a5686c25bcec993eb1ec2e503b6c8
-
SHA1
35037f56c14b5efa372191602465965350d59b3a
-
SHA256
5766db669383bf045a98b1ba1cfde941d9ad7e1e488336bafaf784a9235f5307
-
SHA512
c9185ba14de1425e4c88de567b990cb27f41f6daa70184c2f37efebb286698af2bd580741cc026a9bd0744f01047d14201bbab244390173ed9627aa3eedafc48
-
SSDEEP
1536:oGBmKxF8WMxrZVesCsYln0xt1cWeC1/Opez:oGBmAir7TvqW1cPK/OpS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c25a5686c25bcec993eb1ec2e503b6c8_JaffaCakes118
Files
-
c25a5686c25bcec993eb1ec2e503b6c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 48KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE