Static task
static1
Behavioral task
behavioral1
Sample
32a572f15069d8d4b87d61562b56bae8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32a572f15069d8d4b87d61562b56bae8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32a572f15069d8d4b87d61562b56bae8_JaffaCakes118
-
Size
170KB
-
MD5
32a572f15069d8d4b87d61562b56bae8
-
SHA1
05c029a94b28238551864ae5e4e85727a47e19df
-
SHA256
e48b270333efb38050181fdb7e454a0239c354b8352eff73749227b13c7240a5
-
SHA512
3f603293758cf9ab8e52ce1d82a12fc03bda8c4b64621a6023e67b7b0898a6366160fad7ac2a5f52ea81b891c6b39fd7cf5b3550c9514f09a738e9644fb95776
-
SSDEEP
1536:7E+ukTkkRxD3nccRsBttRJtwE/RT6009BugzcMTjndiU0X0yeRAfvzG2nouy8B6:lDDnccCXRJqEJG4KcMTjdi5/vzdoutB6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32a572f15069d8d4b87d61562b56bae8_JaffaCakes118
Files
-
32a572f15069d8d4b87d61562b56bae8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE