Static task
static1
Behavioral task
behavioral1
Sample
21cb3ae067f070946245b040ef029bf8_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
21cb3ae067f070946245b040ef029bf8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
21cb3ae067f070946245b040ef029bf8_JaffaCakes118
-
Size
572KB
-
MD5
21cb3ae067f070946245b040ef029bf8
-
SHA1
36f1b8aa9d2d27f3c07b72a37e462c76019e0a9a
-
SHA256
1f0469a08681198ff9288b2727b200cb697d1cc85024ea026a69b1d8a9e026a4
-
SHA512
3ac0c23bcbdb5802e4f0ef9f4ef2dafe3ecfe1c5a94f17c0ff2b40afb8335b121baaadffd48e96eeb2b4f454f60c4c787b83ef9375f5b714e3d4b9589c85f15f
-
SSDEEP
12288:kdZx+60R5E2asEKokfKcMRjIEGpzK6FSkFvS6rZhxi4RQ0gVh:kXx+60R5isEKokVuU5pzvSQZhx5eVh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21cb3ae067f070946245b040ef029bf8_JaffaCakes118
Files
-
21cb3ae067f070946245b040ef029bf8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 25KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE