Static task
static1
Behavioral task
behavioral1
Sample
20c6cd1d13fb8778f88c156f3ca3f08a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
20c6cd1d13fb8778f88c156f3ca3f08a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
20c6cd1d13fb8778f88c156f3ca3f08a_JaffaCakes118
-
Size
19KB
-
MD5
20c6cd1d13fb8778f88c156f3ca3f08a
-
SHA1
b469a107885b5603e751dc3dafa892c8afd7c785
-
SHA256
74b0593c91a689e81a8860f5469c795ebabdb6370820b7171fa84dd733d3b63b
-
SHA512
8b0441b49d09d0eee0ef85606ae850e51dbd86744f1cd8a4ecd3fe4dba8743722b7ea9d2f46e85703d298c9c255535a73c06d6b6de9ae0f62e5fae3e02f25aba
-
SSDEEP
384:xmSBDYX+Ex1GgDJw3wiAnQyrybfrtDdALIB9raNJawcudoD7U2w:xdgHlNwg596frtDdASknbcuyD7U2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20c6cd1d13fb8778f88c156f3ca3f08a_JaffaCakes118
Files
-
20c6cd1d13fb8778f88c156f3ca3f08a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE