Static task
static1
Behavioral task
behavioral1
Sample
24c65acc358d7ba25aabbab6c32d6c0e_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
24c65acc358d7ba25aabbab6c32d6c0e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
24c65acc358d7ba25aabbab6c32d6c0e_JaffaCakes118
-
Size
28KB
-
MD5
24c65acc358d7ba25aabbab6c32d6c0e
-
SHA1
0a7b89e73ea82eee18bafc102eb6eb07331ee410
-
SHA256
1b9e29bc1f554dcb29fbc5465e7da2b37e748566bd8d047003070fa95baea07f
-
SHA512
0039e9a039ae8dbd13553d10f141010303fd858ee19ad16e2ea84c3b554433cf5255e2683353f9ef5309b67944d28f0366717974e6cbacf31c03f30646fc96d4
-
SSDEEP
384:dnvlAOyXGOuRyRd88vkSN8u4ClK1gY91eAfNnoEoQ6+WhYmDmSGnn5SmPFQmy77n:xW3XtRKQkiBAfFxqYm66CQ377n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24c65acc358d7ba25aabbab6c32d6c0e_JaffaCakes118
Files
-
24c65acc358d7ba25aabbab6c32d6c0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.lcc Size: 512B - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lame Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nfo Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE