Static task
static1
Behavioral task
behavioral1
Sample
21db798eea2e47271a548c017a01b2f3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
21db798eea2e47271a548c017a01b2f3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
21db798eea2e47271a548c017a01b2f3_JaffaCakes118
-
Size
851KB
-
MD5
21db798eea2e47271a548c017a01b2f3
-
SHA1
31a7a11a7373f2da02d26a328b9bf2de534b1fe4
-
SHA256
67c0414823ccad805a7b7f9fc88ec86bfe9f6025adc604a854e4058d7bf6a8dc
-
SHA512
a331fc8d360d8254ad7f834044bae2a497649bc1fd2329bdfa18d2720d6e7bfee41ed971feca2001b0e57df619629a4878a7485587ca4317b6a4730cd4cf74bc
-
SSDEEP
12288:s2WLcO9nKH+SXOOatDOOEmxfzU0pGk+/XYRFPnJizN9bUt0Jb2x6kMPbfmSRT2:1O9Q+S+O6EmpGk+/XYRFIUt4a8kMjfmf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21db798eea2e47271a548c017a01b2f3_JaffaCakes118
Files
-
21db798eea2e47271a548c017a01b2f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
��e�� Size: - Virtual size: 872KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���)�e � Size: 850KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE