Static task
static1
Behavioral task
behavioral1
Sample
dc25a040b70b65f6b4cb3475c7c34791_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dc25a040b70b65f6b4cb3475c7c34791_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc25a040b70b65f6b4cb3475c7c34791_JaffaCakes118
-
Size
41KB
-
MD5
dc25a040b70b65f6b4cb3475c7c34791
-
SHA1
435fb71dad7800b77c8e7e6edd35aea6fec7c391
-
SHA256
430d679ab1be560d9b4925fbcc799da98f9bfcd4cebcb3dc02921940cba66828
-
SHA512
2858a80ae225b61991894c81a4541e06880c617a411bdf3043a1c58cb565ea0ce5d6d0262fb93479008ac07bc1920a79ef3b260115bcc2996bc0131fc8904255
-
SSDEEP
24:edGS1ADUEDsBzwwKK1YtXNzsIz4EHHJ5lrjR3UrYV/:q1AoEDsVKKGtdwIz1pXAc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc25a040b70b65f6b4cb3475c7c34791_JaffaCakes118
Files
-
dc25a040b70b65f6b4cb3475c7c34791_JaffaCakes118.exe windows:4 windows x86 arch:x86
b25961cb3bed280171b0452e0c1084d3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
Sections
.text Size: 1024B - Virtual size: 754B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ