Static task
static1
Behavioral task
behavioral1
Sample
24e6d6a3fa171e3f9158160f0739e3d1_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
24e6d6a3fa171e3f9158160f0739e3d1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
24e6d6a3fa171e3f9158160f0739e3d1_JaffaCakes118
-
Size
64KB
-
MD5
24e6d6a3fa171e3f9158160f0739e3d1
-
SHA1
075656354f4c50cc492e6feb83dce497ef4e6918
-
SHA256
1ccb0d778e3bd83b314f006fed630dd3b64e779ad93624e041f7b06feb5a68c8
-
SHA512
5de75b82b39687f7573a6303fce01a1f44e3410f51a15fd6bbfdd5e16be27253fde8c84017bf6fcdb5b43123610b2f5b8d3ca1f30fa2e1974f0956012292e0f6
-
SSDEEP
768:uR2+CtDELF4ItC6DJSe2DzAmhK5FDIVMWUdMrCtRywm3UwDRddDSLhR5/JeMfMhk:KCcFPRuDkMWFDgUNyOifdGLLFGL4r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24e6d6a3fa171e3f9158160f0739e3d1_JaffaCakes118
Files
-
24e6d6a3fa171e3f9158160f0739e3d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE