Static task
static1
Behavioral task
behavioral1
Sample
21cf3312a7f868c25ca40401a3dd7eba_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21cf3312a7f868c25ca40401a3dd7eba_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
21cf3312a7f868c25ca40401a3dd7eba_JaffaCakes118
-
Size
26KB
-
MD5
21cf3312a7f868c25ca40401a3dd7eba
-
SHA1
261ba68f0c92161c22cc23c274e5c2a734c2e999
-
SHA256
b273b1c0a08b2d3de047c4a1f4eaad0b7509010361554cf6ac64889b18f3c637
-
SHA512
38170aacc310949cbe943cb8043a94510a83f428d08a327605cd45d941a19f920a91ad7960279876f533404975e834beba4b8d50fd0f96619b49358fdae0a185
-
SSDEEP
768:d+2CavETBmGAYyY+OutTqpTF4SnznPiXUX:dTCas0YyYb4SznPW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21cf3312a7f868c25ca40401a3dd7eba_JaffaCakes118
Files
-
21cf3312a7f868c25ca40401a3dd7eba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE