Static task
static1
Behavioral task
behavioral1
Sample
d25ce2b482ded77a2ab24dff62dd17c0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d25ce2b482ded77a2ab24dff62dd17c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d25ce2b482ded77a2ab24dff62dd17c0_JaffaCakes118
-
Size
64KB
-
MD5
d25ce2b482ded77a2ab24dff62dd17c0
-
SHA1
622a4b2d3cb3da71ebba93354c904119d8f5c4d8
-
SHA256
2dfeed23b13c1a71fb1b8330e9eedf9edf9a101df7bb1ade96fe5a3f03d74a2a
-
SHA512
3d3d42d083c68bcc60727ca404c0b34ecacf4e2c650d4ac355bba544efc896a074f25298164d0cff65b92b6c185f7287c24f26063b6e3aa31383dc7499a4a816
-
SSDEEP
1536:sV6onxcYm9l4F1zWC8FCGwMcDyC+TKNMMW/4FZjevLF4Iw3oa9:sIon4947yCg0W/4/jehXU9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d25ce2b482ded77a2ab24dff62dd17c0_JaffaCakes118
Files
-
d25ce2b482ded77a2ab24dff62dd17c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE