Static task
static1
Behavioral task
behavioral1
Sample
e25e3e5ad8fdd021f7b332310047b487_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e25e3e5ad8fdd021f7b332310047b487_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e25e3e5ad8fdd021f7b332310047b487_JaffaCakes118
-
Size
1.6MB
-
MD5
e25e3e5ad8fdd021f7b332310047b487
-
SHA1
c0518a406f7eb50c26609a97e9e2d18300220c03
-
SHA256
5bd626063522dd40e133e6d8cd1f4f23da1b492ec5e071ba60e62930958fc187
-
SHA512
58a50aeb5254653a9fdb27705b62ff9615e93b4b0b993e446fa1dde31d2257961a3f693ae70f3d3c5e3ad73bffb93e5909299d77267d7c10cdc566c3f5c50395
-
SSDEEP
24576:a69tXJ2Tnt13HQy5Sk28LE5+t0pOdRH9rJkQx4tUjS4bQ6t9Wnkd7S:zkbb92IeODHIgjdsk9WnO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e25e3e5ad8fdd021f7b332310047b487_JaffaCakes118
Files
-
e25e3e5ad8fdd021f7b332310047b487_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ