Static task
static1
Behavioral task
behavioral1
Sample
24d0777809d8af9d96bf98fbc43ff7bd_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
24d0777809d8af9d96bf98fbc43ff7bd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24d0777809d8af9d96bf98fbc43ff7bd_JaffaCakes118
-
Size
270KB
-
MD5
24d0777809d8af9d96bf98fbc43ff7bd
-
SHA1
433d4a4efa27aa238ef1645d46732e9bc9428550
-
SHA256
da32a3b8c6f2bca10bde4e2e5696fd0ccb48311c6efa5437334120c01eddacc4
-
SHA512
f0021c9afe61c1a550b1626738854c3b4f2386d4524575223edde417c7a114638555ab979e3371094d23b55c672e38dab61f7035085499590695bfc96aecc924
-
SSDEEP
6144:lp6u1+uRsyi/hLRGyeVkGrMO3N9hF4fe6ByMnk/WUvsItxJNE7U8e:lp0uRsxZAxhMarNu1n5gs0xJ2e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24d0777809d8af9d96bf98fbc43ff7bd_JaffaCakes118
Files
-
24d0777809d8af9d96bf98fbc43ff7bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 105KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ud2 Size: 333KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE