Static task
static1
Behavioral task
behavioral1
Sample
22daeba56ba5df781f27a05b8f8f51e0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22daeba56ba5df781f27a05b8f8f51e0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
22daeba56ba5df781f27a05b8f8f51e0_JaffaCakes118
-
Size
181KB
-
MD5
22daeba56ba5df781f27a05b8f8f51e0
-
SHA1
dc59ce20c7010efa25fb08117b9d1e05e6c9caa4
-
SHA256
3cb109cf03f1519ba0ab77061fce66ebaa86d36185b76a98b5cce71466711377
-
SHA512
e645f3d2c3289d7dc3982459d3fcd8559330d2dbaa697ce9d7eef7f5b285791c8a5de8b2e51deddc247bfc35cf6654f367b4a9e48a2613a7dd4e4c3f0ab66d59
-
SSDEEP
3072:um7KP0jYGpqSvN626FCCml7SbwfvZua+jXiCep4oj9jy4RA7OEarG5u:u10jPpqSo9CSeZuaOe1yP7Fay8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22daeba56ba5df781f27a05b8f8f51e0_JaffaCakes118
Files
-
22daeba56ba5df781f27a05b8f8f51e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE