Static task
static1
Behavioral task
behavioral1
Sample
20d3fdf6c84e22fa3a41a9b53820ba61_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
20d3fdf6c84e22fa3a41a9b53820ba61_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
20d3fdf6c84e22fa3a41a9b53820ba61_JaffaCakes118
-
Size
183KB
-
MD5
20d3fdf6c84e22fa3a41a9b53820ba61
-
SHA1
86f220a6b048ea3fb4bdd10c8a8aca7c8e320682
-
SHA256
2455a5d1805bbb019ca88c93a8f8a099a42e552528619a51d3eebe06684237b1
-
SHA512
e2bdf06db24f9021931a470cd98019161368024d6c9e616d639edc261b3d601c0c917f22a045ed3bf0d0c07f80fab266bb1a34b7a2815e2cb9917408176fa694
-
SSDEEP
3072:83GCZi+u93NyBNr9hoOVGToadTutNaubNVFywb9Ve4kZJcMKQv+C25MOLdUr9hoO:Zv4o/ToUatsubNawb9VOExRCiMOEo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20d3fdf6c84e22fa3a41a9b53820ba61_JaffaCakes118
Files
-
20d3fdf6c84e22fa3a41a9b53820ba61_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 36KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 33KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE