Static task
static1
Behavioral task
behavioral1
Sample
21bb4b6d2f1999aafd7ef55c7c5f3147_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
21bb4b6d2f1999aafd7ef55c7c5f3147_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
21bb4b6d2f1999aafd7ef55c7c5f3147_JaffaCakes118
-
Size
1.1MB
-
MD5
21bb4b6d2f1999aafd7ef55c7c5f3147
-
SHA1
dcc449cfc1bc63cff7f213a4e3e4aa11e17aa804
-
SHA256
b0009baf51f1be2a5e941a066597f716a127fc7532666c14262d71aa44dca5bb
-
SHA512
aeb2869ad92762eafbb2fbc8f39220e5aca02782300553663457eb813f44eb71b0c305d0704c1a047b579023003d4335091628fd2b45305dbad983cb8b0d9152
-
SSDEEP
24576:Ybneh4PEGY/aHqt5Xv3HLD/pAbagKpazYdKJK:mdb3qfXvXLbpAbDKozXK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21bb4b6d2f1999aafd7ef55c7c5f3147_JaffaCakes118
Files
-
21bb4b6d2f1999aafd7ef55c7c5f3147_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
/rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.�data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsc Size: 4KB - Virtual size: 768B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ