Static task
static1
Behavioral task
behavioral1
Sample
32336603ea07c8f9f6f7ce29d526a8e1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
32336603ea07c8f9f6f7ce29d526a8e1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
32336603ea07c8f9f6f7ce29d526a8e1_JaffaCakes118
-
Size
1.6MB
-
MD5
32336603ea07c8f9f6f7ce29d526a8e1
-
SHA1
30ddb06b538cf27534b41c1c757d40203e75c0e3
-
SHA256
97095a0ba507c98923e51471acf048fd9bce2b6baf904660fb9a2aa77219c966
-
SHA512
b47b64ba1bfa20ac495e4d2262472f48a4ed78a0b86637122d6c173b95ae3a6aeabaa35a74c8cfeb5e3740b55a510eae8d0e3542b3b1bb6a9958f8758a794e33
-
SSDEEP
12288:UZWtI6Rk9OB0heZJys73dOvXDpNjNe8DerQZb+md4w1Ur:Uuha9OieZJ8NI8DerQZb+md4wmr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32336603ea07c8f9f6f7ce29d526a8e1_JaffaCakes118
Files
-
32336603ea07c8f9f6f7ce29d526a8e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ