Static task
static1
Behavioral task
behavioral1
Sample
32c9c32ef8ee817637a243a891410258_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
32c9c32ef8ee817637a243a891410258_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32c9c32ef8ee817637a243a891410258_JaffaCakes118
-
Size
216KB
-
MD5
32c9c32ef8ee817637a243a891410258
-
SHA1
fdccb7e16dc57bd605304c05b3873e523aa72932
-
SHA256
7d80ab9b8831d78cd46ce8c64ea818e9bea949f9beec611167449263eb60786b
-
SHA512
1dd9cc9d63490c7c62657d2034448e8a4685f918579eba90177ad32dce9c2a2fe7d183dc892008fce5016db57401fbc2a80f5c2dd7da9e2c75ed09ecd69609b0
-
SSDEEP
6144:44nDWgRAkPwZ83T4mWfyRA1un8XMd70akA4gX:JR3PwZ83pWG07KugX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32c9c32ef8ee817637a243a891410258_JaffaCakes118
Files
-
32c9c32ef8ee817637a243a891410258_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 261B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ