Static task
static1
Behavioral task
behavioral1
Sample
32c67af3cccd7d3e26f60e25684d4b0b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
32c67af3cccd7d3e26f60e25684d4b0b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32c67af3cccd7d3e26f60e25684d4b0b_JaffaCakes118
-
Size
16KB
-
MD5
32c67af3cccd7d3e26f60e25684d4b0b
-
SHA1
d756c7319af61a6db44f42687e32df49a4dbe380
-
SHA256
bd2eff8d67a7c4cfb0a5bfdf75da1c568bf438a8b9b55877ba52937769dce48d
-
SHA512
7d83b5306d5f7371bfc0ee1356aa304d2b15409a6cc9af945a3c488e3023bb3beb80b1e2f4ce8e4af4072e21502ec02e0525ad992381379608ac70b00d6456fc
-
SSDEEP
384:loTZsgEZrmCyXOlvvUV/N5Dlmv4fYaLve1JgnvWDAFaD:uigar3y5VPpmvsBLvKOq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32c67af3cccd7d3e26f60e25684d4b0b_JaffaCakes118
Files
-
32c67af3cccd7d3e26f60e25684d4b0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE