Static task
static1
Behavioral task
behavioral1
Sample
21b63dac50d07fd86dcfe5178b2b40fb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21b63dac50d07fd86dcfe5178b2b40fb_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
21b63dac50d07fd86dcfe5178b2b40fb_JaffaCakes118
-
Size
312KB
-
MD5
21b63dac50d07fd86dcfe5178b2b40fb
-
SHA1
29aee348b1607b0b723746beb9cc677636539a3d
-
SHA256
209520908fc184825634de5142bbcf13118ba4cf6640d73f35e7c605dc41e621
-
SHA512
0d215c50e0bbc8b8e1aa7e8dc2ab9e211a5836b2d1967908545f4c0dcca5c793356bb4507def64b698c66ce09d6ada236ad974eaed825ff2191946c16425f571
-
SSDEEP
6144:HreJZedKnDgwLrKoZKESczFxhLwgAYTHSOFpVHsQgDn:LeDedKnSoZKqDhdAYTHSOt+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21b63dac50d07fd86dcfe5178b2b40fb_JaffaCakes118
Files
-
21b63dac50d07fd86dcfe5178b2b40fb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 307KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE