Static task
static1
Behavioral task
behavioral1
Sample
20e4bfe2e6dbd3c736d9483aa07d6a23_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
20e4bfe2e6dbd3c736d9483aa07d6a23_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
20e4bfe2e6dbd3c736d9483aa07d6a23_JaffaCakes118
-
Size
1.2MB
-
MD5
20e4bfe2e6dbd3c736d9483aa07d6a23
-
SHA1
39c47df4c5ac67189e478ae309db704bf9bd72c6
-
SHA256
0700c019137a9fc9634be84bc18d04840df44732acb7aa99b5c1f703cda41518
-
SHA512
9fa4b1e5144ca52ad2888d989e4c507053e6c395f973abbb6194ebe1969b74aeeeb3421e26a134deaa8fd8bd04b791ee4a7210422dd485c589aab6472c5d9fc5
-
SSDEEP
24576:4HusVy940vp5HFA8O20I8x4aA7Kq0Cd51SSpZE1dZTdBcmS2IczxyU:M/VovfHRO264aA73HpAZT4mS2I67
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20e4bfe2e6dbd3c736d9483aa07d6a23_JaffaCakes118
Files
-
20e4bfe2e6dbd3c736d9483aa07d6a23_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
KnHA2S Size: 966KB - Virtual size: 965KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fXq Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
K9VQfH Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WSAFZE Size: - Virtual size: 21KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
grKlU Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
la9 Size: 1024B - Virtual size: 806B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
G9 Size: - Virtual size: 64B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tvkG Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
1nun5pw Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VwNuALxH Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE