Static task
static1
Behavioral task
behavioral1
Sample
32c93f96c67502ca74f6282f9ad33fed_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
32c93f96c67502ca74f6282f9ad33fed_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32c93f96c67502ca74f6282f9ad33fed_JaffaCakes118
-
Size
22KB
-
MD5
32c93f96c67502ca74f6282f9ad33fed
-
SHA1
e5477bdb65e4ec7d9e3c89968721f623de21e7bd
-
SHA256
2a590315a8435b717393f1cb8a940f5e8de53640f4d717963d8815f0f754eba0
-
SHA512
c502e906624c9af8a3b5cbed6ad744a7c41a02aba2a247f8f2cbf0da14423b57a5053febbe312930c1bdad6ac1fd48c7b30dbab8f02fb6fc8330e5aba76fec47
-
SSDEEP
384:ejU+zqvjSx/1Z1ucBubMbKc11sTiUxHjgioeyuglHAKB1yIhAI6zKgJespz3aD7g:eQ+4SxdZ0cBubEkWUHzoe6HAKB1thVtu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32c93f96c67502ca74f6282f9ad33fed_JaffaCakes118
Files
-
32c93f96c67502ca74f6282f9ad33fed_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 21KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE