Static task
static1
Behavioral task
behavioral1
Sample
25aecf0fc78eecd8d7aad4cb109598e9_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
25aecf0fc78eecd8d7aad4cb109598e9_JaffaCakes118
-
Size
100KB
-
MD5
25aecf0fc78eecd8d7aad4cb109598e9
-
SHA1
754623bc88cf7a76e0cdc3c31b47bf5c4bf3589c
-
SHA256
fa39894ac9fad81a31dd178b3ec9c8e388d43b59378200d7c797bbd9406c4ab2
-
SHA512
9cb4edc4ca1e31fe9b34b651872d023f20fbf9a018a805d396a91ef32e48536f55da55a5b106f59d2e37431b162aeb082a40719c9d9e45da72995b12c3b2e379
-
SSDEEP
1536:bn7rns5n4pWVOMRFTbeItpKmzf/HkAzMF/0ufKoKD2k/2yDfdEBDLw+nDELwuF:bnkmsvFTbeIvz7lzu1IKwf27WF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25aecf0fc78eecd8d7aad4cb109598e9_JaffaCakes118
Files
-
25aecf0fc78eecd8d7aad4cb109598e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ejg Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
l8 Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qfnr Size: 4KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE