Static task
static1
Behavioral task
behavioral1
Sample
21cf8bf63bf8c1b3faff6f369764a8a0_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
21cf8bf63bf8c1b3faff6f369764a8a0_JaffaCakes118
-
Size
251KB
-
MD5
21cf8bf63bf8c1b3faff6f369764a8a0
-
SHA1
a03659d4966679f90841a249e0ccb4ea5af36ccd
-
SHA256
977e0593ee89cdcb03ca9c409ea409e54b20b87b5b4cdd61e4f7476beb8799f4
-
SHA512
c015749040ba6b3a9fc936865d0c0135928880dce03e5d186f74bcfe36a6179472666b672cfc9cb8b6b26cdbf9158d6739c8e272ed478129970e3ae3720d0a96
-
SSDEEP
6144:SdLEiqUZ6FshhaFn+aCyIK3ccnMxjZgNBmVu/3mv3:Sd4shatW1K3Dns/Smv3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21cf8bf63bf8c1b3faff6f369764a8a0_JaffaCakes118
Files
-
21cf8bf63bf8c1b3faff6f369764a8a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 79KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.safe Size: 155KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE