Static task
static1
Behavioral task
behavioral1
Sample
21e646d05d7cd112881fc37af0c2f042_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
21e646d05d7cd112881fc37af0c2f042_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
21e646d05d7cd112881fc37af0c2f042_JaffaCakes118
-
Size
122KB
-
MD5
21e646d05d7cd112881fc37af0c2f042
-
SHA1
436566da49f570e4da61471b1b59ab575495b003
-
SHA256
f6b7ce084d877cad50ea0f366c4fba91a02a0a5cf336e8c8599ca4a80df410b8
-
SHA512
ffd5b56d0ec68384e708126e76077694612386026416fad0d11f5a82b61d67380829091f536bfc24dc469e9bcfd157eaf54c342f1e9280d89b8b761c14bcbbfa
-
SSDEEP
1536:NcAFr5sQEsFQ4zj5XmkQa64ZPV/Oyvy3AIXq7xXJWQ8U9lJDA8pKBk9WZpVTXS0j:aAFZdJo9Eq3juJxD9M8pWXJUU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21e646d05d7cd112881fc37af0c2f042_JaffaCakes118
Files
-
21e646d05d7cd112881fc37af0c2f042_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE