Static task
static1
Behavioral task
behavioral1
Sample
33a6097e2da69de2ccabf1d7cb5a1452_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33a6097e2da69de2ccabf1d7cb5a1452_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33a6097e2da69de2ccabf1d7cb5a1452_JaffaCakes118
-
Size
22KB
-
MD5
33a6097e2da69de2ccabf1d7cb5a1452
-
SHA1
b6b6801a1a36f73acf8d0a117a8fedd4d6e7aa43
-
SHA256
2e1f4c132633f5ecc57dd5031e79c87fc78cd7256ddc039659193a26d8eac002
-
SHA512
71d8d376e4e00e7ecd7e8914f20b30e8052c9a8b92db08586b3c5a17ed5aceb655a9118d6c61889c913c9a4245108d479e8475e8c14ac786d1ec2ae3fdd8d099
-
SSDEEP
384:Kku6ZH1GstqRmf5OYR0Ocx5mDgJwBq0d3XnDwq9udu+0lAxDr6+e9Pfqbn1oR:Q6RwPmhAmDg0qgX8hdPdx6ha5oR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33a6097e2da69de2ccabf1d7cb5a1452_JaffaCakes118
Files
-
33a6097e2da69de2ccabf1d7cb5a1452_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
?$_n@n$K Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
X B/EC(N Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
:/T@>/T4 Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WpQS?j^` Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i=H9bc-I Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Z=id2naR Size: 488B - Virtual size: 488B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE