Static task
static1
Behavioral task
behavioral1
Sample
24891333927fe4985d3a429c7bb03c41_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
24891333927fe4985d3a429c7bb03c41_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
24891333927fe4985d3a429c7bb03c41_JaffaCakes118
-
Size
31KB
-
MD5
24891333927fe4985d3a429c7bb03c41
-
SHA1
8f243410385e5779dffea6603e4a5ba9a5d520ec
-
SHA256
744c0a122834a760995164bcc2ebabde6c2f4f8a375a5c12f17291371246b10a
-
SHA512
8259fdb791cf107d7f8f80284ea34136d21d173cfdd16a28cb49558b694470cb364b7fca131d8ad78146c600d6a902d61013bcb31a5a8dc83f8cb3ff2535f337
-
SSDEEP
768:jACPY9SGAABpj3Kufzde+DVOX7BreBjpl2vTPNMhKH+02hXn4fTtf:jACw9pHKufzdeHQdeTPe4HQXneTF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24891333927fe4985d3a429c7bb03c41_JaffaCakes118
Files
-
24891333927fe4985d3a429c7bb03c41_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�$Hz0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�$Hz1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�$Hz2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE