Static task
static1
Behavioral task
behavioral1
Sample
32c534cb23f446dbe9e06d90ca273f78_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
32c534cb23f446dbe9e06d90ca273f78_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32c534cb23f446dbe9e06d90ca273f78_JaffaCakes118
-
Size
2KB
-
MD5
32c534cb23f446dbe9e06d90ca273f78
-
SHA1
d9e820f3118ebb2a26407c09362e5d07adfbcdca
-
SHA256
e704a8c3670635fc6c005f55f4dee9caecf1d6e1aff82af984f63e0e48337cc9
-
SHA512
d244130fdba368059d2523382f6d89b4c26054960f46e1bd04b07d786eabbc955ce6d78409dd933393b0d6c3e43a8f5e6ac0dad520b7a99438f9dd689792d9c3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32c534cb23f446dbe9e06d90ca273f78_JaffaCakes118
Files
-
32c534cb23f446dbe9e06d90ca273f78_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
rwbh Size: 1.5MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mrw Size: 64B - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
chmrxc Size: 48B - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmsx Size: 64B - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE