Static task
static1
Behavioral task
behavioral1
Sample
214af4aa22e2b5311cf39fa2e1c7fc12_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
214af4aa22e2b5311cf39fa2e1c7fc12_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
214af4aa22e2b5311cf39fa2e1c7fc12_JaffaCakes118
-
Size
18KB
-
MD5
214af4aa22e2b5311cf39fa2e1c7fc12
-
SHA1
41123ea45e1eefc664ae72b6c46b31db0037ca2d
-
SHA256
d6606f88e7ca13e41560856b52a9f7116e613d0cd42e2f7d2f0d08154ee532a9
-
SHA512
54a5fe240290e19ce8d77d460a44d1642b9c3bb974dc3f9a0c7cd6e71aedb3e3dc7a2dada756df8ab5c42ee72dde23e2cfa637a170061775edd9073639639d88
-
SSDEEP
384:3GtDPzvYi+s+90qMVz3rcFcjrA/V4M0G:s8iMMVvLw/+y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 214af4aa22e2b5311cf39fa2e1c7fc12_JaffaCakes118
Files
-
214af4aa22e2b5311cf39fa2e1c7fc12_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Aske$� Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.>�#�$� Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$�{�> Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE