Static task
static1
Behavioral task
behavioral1
Sample
33132f5cb4b4f95dc38c4571a605d870_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33132f5cb4b4f95dc38c4571a605d870_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33132f5cb4b4f95dc38c4571a605d870_JaffaCakes118
-
Size
20KB
-
MD5
33132f5cb4b4f95dc38c4571a605d870
-
SHA1
4b2c958007aff4a10a3476168e8c02f169f07849
-
SHA256
17be6dca5eb4d4436123ef4d8cb3cb0f45e1af07496ac4a6d652644d67c7119b
-
SHA512
bca0fa53b5663b5c976f3c99da87d95567f336a69fdefea231c2e3deee2e8992b9a1d1f03bc031e3633664d9b8eda74033e1696ce0b071d75df632d9c7e057a2
-
SSDEEP
384:HrPpxsutNyS3jtipFgCpl9J8frN+GiJyob2CJ6BNeG:zfs2y0ieyv2CQ2G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33132f5cb4b4f95dc38c4571a605d870_JaffaCakes118
Files
-
33132f5cb4b4f95dc38c4571a605d870_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�text Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����k/� Size: 244B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE