Static task
static1
Behavioral task
behavioral1
Sample
21acb5b962320b8365214357baeedc4d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
21acb5b962320b8365214357baeedc4d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
21acb5b962320b8365214357baeedc4d_JaffaCakes118
-
Size
964KB
-
MD5
21acb5b962320b8365214357baeedc4d
-
SHA1
5052597407bc47130f62aa88c424fae23217d8b0
-
SHA256
9623e4f0d93a19a45da89e03b158bd09e3a7a752229f4f5f32a02d8b3b87dbbe
-
SHA512
14e861258f0aea5a69dc880124eb9423802a361c5f118d86281f702f2049a69f8cb1b33163f9438354f9856f8f4f38b2957e929f07038cbd833df11150406a39
-
SSDEEP
24576:RKOMBH3xGBzWSOondf+x56comIabuuW30AAzlcgSdvlgFm0O6N3IEy1MEiRqYQ/4:ZUNIMk4siR+149
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21acb5b962320b8365214357baeedc4d_JaffaCakes118
Files
-
21acb5b962320b8365214357baeedc4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
tmwqhzhx Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 247KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ogmnznhi Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yikwtpiu Size: 633KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uyfwfufj Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE