Static task
static1
Behavioral task
behavioral1
Sample
21b2297b4958f6c06b801388938f231d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
21b2297b4958f6c06b801388938f231d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
21b2297b4958f6c06b801388938f231d_JaffaCakes118
-
Size
214KB
-
MD5
21b2297b4958f6c06b801388938f231d
-
SHA1
098056a004d406db78a159051a64dc45b436377a
-
SHA256
90fc65d5d27489d0a9a6373b35411e39d08a205c8f22a16054331e6b344c1a5b
-
SHA512
531c7801ff4463c09a2bd2866bb2f68432e7d4076e7f6e7c5e7ee8ba1a91fa737a83ceb163ab8db28e4aafb9a2a73971770001aa7846161cf81ec59e3ebc6a11
-
SSDEEP
3072:RTql/L5Qtit3fuFuUPPhTTrReaPm0nKQ1q7Ep4ieAnCTkL7eXtmbM6ZVUJQ77jNT:Nql/aQ3fuF9PhfrxxK8/Op6SYUKT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21b2297b4958f6c06b801388938f231d_JaffaCakes118
Files
-
21b2297b4958f6c06b801388938f231d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE