Static task
static1
Behavioral task
behavioral1
Sample
25fa1b1beb1d4f48e960e8de1cf85a53_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25fa1b1beb1d4f48e960e8de1cf85a53_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25fa1b1beb1d4f48e960e8de1cf85a53_JaffaCakes118
-
Size
699KB
-
MD5
25fa1b1beb1d4f48e960e8de1cf85a53
-
SHA1
0629008080268800be5fbbb828ef53b657f86374
-
SHA256
0e7aa451fafb29fca91ecf5c4c4619240b50ef79a96277ffa7f79d9d53d07921
-
SHA512
8ce85eb82faf9419fa728185e654d894cc1f8a6fef6ec08f5b474989722bcad52aea04a09f5239c53b05ce3173a440f6eaaee48cad9b99cac392a8b8dab0f9f5
-
SSDEEP
12288:OBfPUJFneSNvle9jtj0M0m5xlJQuN/jk6dCZf72YfQ8DfUIffuj3Rn9F5fyI1Ld:SeF1NitjvnxlJZ/jghiyQ8DsqQfJ1h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25fa1b1beb1d4f48e960e8de1cf85a53_JaffaCakes118
Files
-
25fa1b1beb1d4f48e960e8de1cf85a53_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 220KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE