Static task
static1
Behavioral task
behavioral1
Sample
24989c3f17f35ed4b77b86368e25273d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
24989c3f17f35ed4b77b86368e25273d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24989c3f17f35ed4b77b86368e25273d_JaffaCakes118
-
Size
397KB
-
MD5
24989c3f17f35ed4b77b86368e25273d
-
SHA1
87543a9133d85a5822fb1b120f6c696cb0e24970
-
SHA256
0cad70140c1567e3d21183cdf3beb0cd2bc9be18bc9d976b404c4419706d7fa5
-
SHA512
39753058cf4c07c985a3a142c61bf23f1b364e7b0c7ba3a477f19420b04ae5b9a1f16cbb1307ae2f8f886ba340863af5c34e76dff995eb951c512eca522cc1c0
-
SSDEEP
768:1vfsyfF9IqPzlLqMN0nJNFapGdO2InubOTBjyHwNs+DXLKAKS8Pic862wnqP3vjb:lbIk36NFTqTB7s+D7cS8p2mDU9p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24989c3f17f35ed4b77b86368e25273d_JaffaCakes118
Files
-
24989c3f17f35ed4b77b86368e25273d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ