Static task
static1
Behavioral task
behavioral1
Sample
24f14135a8671f325cbab102b5134c0b_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
24f14135a8671f325cbab102b5134c0b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24f14135a8671f325cbab102b5134c0b_JaffaCakes118
-
Size
564KB
-
MD5
24f14135a8671f325cbab102b5134c0b
-
SHA1
a693005aa5b577ac28f7243fd34e17d2570852eb
-
SHA256
42c86a90a753eb1f33e8b5f4a0b51e44f79eea20e9b2947664fa93fad761e62d
-
SHA512
9235bf5dcdb026a65f3aaf94cd9cc09ff2686ea40590c05ae2828f71267da2d084147ad219fb58a6b042a2470ae88be3c05c15c78bb88e951f98668ad7a8e4a3
-
SSDEEP
6144:dlIx1/2iMdGy4/4fkVDWt/n+aCZAN/hEzRrsq2dxllgjGUcF3YlleLQExf0wp8jc:Qx1/6TVvlWZA7EzeqU3lBZ3kEKD77
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24f14135a8671f325cbab102b5134c0b_JaffaCakes118
Files
-
24f14135a8671f325cbab102b5134c0b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 67B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ipro Size: 354KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE