Static task
static1
Behavioral task
behavioral1
Sample
25318834e5d61d09953a10d0a81f9ee2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25318834e5d61d09953a10d0a81f9ee2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25318834e5d61d09953a10d0a81f9ee2_JaffaCakes118
-
Size
121KB
-
MD5
25318834e5d61d09953a10d0a81f9ee2
-
SHA1
83e5a37d06beafff5385fbd4f53eb98cd33cbd03
-
SHA256
630f0b03a1f576ae4ce94f772a0c1836db1cc2e962082461b2b8aa579c6bcd82
-
SHA512
3ae3677615c2bcb52a0dc0a3e10263c1937bee65a9f94849dd152dd025ab66f69203bdf975ebc47ef0907ceccd98e921c0ebf824684712d61b35ba2d49650b0b
-
SSDEEP
3072:v/RvEnx8bqcn0XYD3nG+jPfwZtFvQFJC3ZHTMCgqM6outz:vJ+20XYjiFIFJCpzMD6oSz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25318834e5d61d09953a10d0a81f9ee2_JaffaCakes118
Files
-
25318834e5d61d09953a10d0a81f9ee2_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
rMFI>; Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rMFI>; Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rMFI>; Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rMFI>; Size: 332B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE