Static task
static1
Behavioral task
behavioral1
Sample
2532ab91274a21f0ed53cc6a10dc8484_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2532ab91274a21f0ed53cc6a10dc8484_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2532ab91274a21f0ed53cc6a10dc8484_JaffaCakes118
-
Size
98KB
-
MD5
2532ab91274a21f0ed53cc6a10dc8484
-
SHA1
2b4e8749c3afc4ea828fd9254672fe7274a11250
-
SHA256
4ab96c0c571f7b19fd2bb443568c442c7ab17a4eefbe50b61d8be2c5952693da
-
SHA512
60f9febeccd5685494d9c222c0ab4033010c6090a3ea4230588e0b3006c33fe3e26f9e0a97aa449e9aa5dba2157cf2acd9dbc46669284c531ce6fe386387df46
-
SSDEEP
1536:O2k/2kMDXaoPaqS7+yOL505wn/TgtfkokF8N:QukMzFc+y40qn/TgiTF8N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2532ab91274a21f0ed53cc6a10dc8484_JaffaCakes118
Files
-
2532ab91274a21f0ed53cc6a10dc8484_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ