Static task
static1
Behavioral task
behavioral1
Sample
21bf08ceb49489b491b0b3bed0c94d1b_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
21bf08ceb49489b491b0b3bed0c94d1b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
21bf08ceb49489b491b0b3bed0c94d1b_JaffaCakes118
-
Size
877KB
-
MD5
21bf08ceb49489b491b0b3bed0c94d1b
-
SHA1
8f19c07fab809c73ca15ea7d4ddc1db97fb5175b
-
SHA256
32cb63179cf3832325958052444ae13892a6ca43986e15e0819791581f908aea
-
SHA512
a15ba232598b19b64531254973f9e30774ca1477149e081e954c63b7fffc917c17ef63e99986b9e2c9aeeedcf017d8ba68627e5cb4de6ae7488dc8a872c83e06
-
SSDEEP
24576:K93ZGZHdQLBUQ513p/ooDRSyZzG9FH6L8Y7wcYfk7u:TZHdoBUQhhZgFw8Y7wLkK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21bf08ceb49489b491b0b3bed0c94d1b_JaffaCakes118
Files
-
21bf08ceb49489b491b0b3bed0c94d1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 116KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Goodbye Size: 403KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE