Static task
static1
Behavioral task
behavioral1
Sample
25b6295b9674d49783a3a068795c9c48_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
25b6295b9674d49783a3a068795c9c48_JaffaCakes118
-
Size
49KB
-
MD5
25b6295b9674d49783a3a068795c9c48
-
SHA1
65f7bf149ed6969ebf2c2bd5514306c6aeef83a6
-
SHA256
dcea87947fbaaeab0b1aadfe03e1154af3efcad8601667666dbfa636eec52711
-
SHA512
3dac581c000fcca82abe5cb1c68fb9299dadb87484976fcbc37b4987caa23c7137119313ec13e72d362d831671d03c0f82e122209f19fe548cd6719dc030c592
-
SSDEEP
768:DMElOIEvzMXqtwp/lttaL7HP4L8Dxk8zoYAVWtKp3VNUltz3I/gKPG:DMaYzMXqtGNttyJxktYAVsKP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25b6295b9674d49783a3a068795c9c48_JaffaCakes118
Files
-
25b6295b9674d49783a3a068795c9c48_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE