Static task
static1
Behavioral task
behavioral1
Sample
20c7cede7df2b5fb9e6db525b37c8f47_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20c7cede7df2b5fb9e6db525b37c8f47_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
20c7cede7df2b5fb9e6db525b37c8f47_JaffaCakes118
-
Size
1.6MB
-
MD5
20c7cede7df2b5fb9e6db525b37c8f47
-
SHA1
5be3307abf871f7aeb831c52fa977a99609f8a21
-
SHA256
283c1e97cd1ee43d94a327009e6f00187029aac56047ea387e765a1f028bb940
-
SHA512
4ae1030db59ff75df86e3ba41a8c533602a374c1742f6185ce9ba9811c9d15ddb707618deb580afaf3d34d411bf2be3e6aa172b19c9f793ad977050cc70543bf
-
SSDEEP
24576:Bbz/ndTRNKCbykAMj0W0r4nPCuu02ZNwlXrVhcYqQtXbMnwohiqIpbpNawiH:F/nB/hz4kONwt3cYqmkh7CNawi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20c7cede7df2b5fb9e6db525b37c8f47_JaffaCakes118
Files
-
20c7cede7df2b5fb9e6db525b37c8f47_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 164KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1.4MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE