Static task
static1
Behavioral task
behavioral1
Sample
21bb60cdb0a60915dddefa4f6932e9fc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
21bb60cdb0a60915dddefa4f6932e9fc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
21bb60cdb0a60915dddefa4f6932e9fc_JaffaCakes118
-
Size
2.9MB
-
MD5
21bb60cdb0a60915dddefa4f6932e9fc
-
SHA1
5ac8e30cc1dfd6f55ffaf459043a934d23102772
-
SHA256
7ae9e5431bbb6bc17dcedfec12768897874ac6de29f239a0fe09c512d1c15a7f
-
SHA512
57169890bc2d8d0060c5697fb1306939de4775d659a3b1b2637759d9bfaa4d99fd5e034adb10c5cc6584865f80ab43db2bbfd83adce533489a1f0c7267af86a1
-
SSDEEP
24576:6SSSylwg7WUtLpwbtLpwkaewsAjdLfUsw/reJYdV/HEp6uuv:N4btL2tLMljdLfU9HEp61
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21bb60cdb0a60915dddefa4f6932e9fc_JaffaCakes118
Files
-
21bb60cdb0a60915dddefa4f6932e9fc_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ