Static task
static1
Behavioral task
behavioral1
Sample
31726a45b81c2b3d54946129634020b1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31726a45b81c2b3d54946129634020b1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31726a45b81c2b3d54946129634020b1_JaffaCakes118
-
Size
256KB
-
MD5
31726a45b81c2b3d54946129634020b1
-
SHA1
21fbd1330fd3b17a1c21cf470a5584321ec6524c
-
SHA256
c92d4d1b18ec2a1373cd8fdedaedac4eb199ea8e82922ab9af59f2180033e638
-
SHA512
700310e3c8fbf28a15856c8d883bedf460c97ef4a31ee2cf8e88bda774b3e22c4a3c6497d33dd13b33296bae08c402793da2e914aeea554f866afca7b065977a
-
SSDEEP
6144:ixOfffTgoOWnLS1nVW5GJZ2tNYLj8Mfsz2kwxX:T0ZVzYKj86sykwxX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31726a45b81c2b3d54946129634020b1_JaffaCakes118
Files
-
31726a45b81c2b3d54946129634020b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 53KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 137KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE