Static task
static1
Behavioral task
behavioral1
Sample
32adab7d781ea61600aba3e166f30264_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
32adab7d781ea61600aba3e166f30264_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
32adab7d781ea61600aba3e166f30264_JaffaCakes118
-
Size
902KB
-
MD5
32adab7d781ea61600aba3e166f30264
-
SHA1
0c164d14fdb7165ad774bd248a095bd5cace5d1b
-
SHA256
1618ac473e87e8012bee7cdd9406d61d5c6fb038efc17c8ab75d77adde28ede0
-
SHA512
4110d3d649fd6c4bd918519197262f4b8b4a58604aaa4965cacacfd505c033c6d8c01e4893ae3cd54f5a3aa1e3c58d35402150acd1f93330c601c6c78a143c80
-
SSDEEP
6144:UZfec9EbXDk6Rk8KU/UOPSe570Szp3Znmy+g43GFrQZb++tdsHP4+QfI6UXnmy+H:UZWtI6RktOB06IerQZb+md4w1UXUOB0H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32adab7d781ea61600aba3e166f30264_JaffaCakes118
Files
-
32adab7d781ea61600aba3e166f30264_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ