Static task
static1
Behavioral task
behavioral1
Sample
24c8cb4ed04c0fedde5644b340f2fc3d_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
24c8cb4ed04c0fedde5644b340f2fc3d_JaffaCakes118
-
Size
128KB
-
MD5
24c8cb4ed04c0fedde5644b340f2fc3d
-
SHA1
00f6f06a1b8ee1eb66859537f24645867b5643a8
-
SHA256
3000a5bab8181d4fba1d6129714f4871d35c2042cc637cd461505b3970cab46e
-
SHA512
3dc6ca55c10ae68c1fdbe9e8421afdef1db715294c6a9edfe73748f64152ea6b22b79d4ca3ed96fae5c8bd995584189fc8e61379f0b4504cfbcbe108a7a43f04
-
SSDEEP
3072:uGHi6mw0ZQZxHjqafTHr0u91vDP7TT44R3OQtgPaZ7:+PZ2Hjqafb91XTT44sM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24c8cb4ed04c0fedde5644b340f2fc3d_JaffaCakes118
Files
-
24c8cb4ed04c0fedde5644b340f2fc3d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE