Static task
static1
Behavioral task
behavioral1
Sample
20e4e6ea4ecf74b4fa079a9f288f00f0_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
20e4e6ea4ecf74b4fa079a9f288f00f0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
20e4e6ea4ecf74b4fa079a9f288f00f0_JaffaCakes118
-
Size
19KB
-
MD5
20e4e6ea4ecf74b4fa079a9f288f00f0
-
SHA1
445b24ea09f9267a445ec248a70e2d122af99576
-
SHA256
fcc3e7a3bc858b5ff8c96e9ec02e3c7e31ddb7d25d95c0291e58797c0ce56a57
-
SHA512
f5c5ccd096a474910cc21198c182937243f82330985a9f6ef9bcc02fd078ea8cbdb0bb24c894807f1c90be146ddafe709ec7b5f8ffd9ca78c7b7c9376c1cedfe
-
SSDEEP
384:FK01JYhcnv2KGZQE7+IE/50b8MbPXuHPKLbLDkWMCvFVAEN16pbihL:FK01rG+j/5KAPCHLN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20e4e6ea4ecf74b4fa079a9f288f00f0_JaffaCakes118
Files
-
20e4e6ea4ecf74b4fa079a9f288f00f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ