Static task
static1
Behavioral task
behavioral1
Sample
33c5f2aee34e39783f68eef0916068a1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33c5f2aee34e39783f68eef0916068a1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33c5f2aee34e39783f68eef0916068a1_JaffaCakes118
-
Size
244KB
-
MD5
33c5f2aee34e39783f68eef0916068a1
-
SHA1
0c27396b5aa9c537bfde5f7a3bbc6044a5d926a4
-
SHA256
34d05f1e7682ba88b3c0b6bbfce54d621a8c65a59c52e3417c3a2d9d0d1dec79
-
SHA512
f5478e18285e583f3322a93e3c75fee7a2c341e8454ce01302b51a7707c88f6e4880b4e52ce29f045ade1861fc1e08d3553285cfdb12ccd9d09abc265f3cfc29
-
SSDEEP
6144:GW2fZnURdwGUZdp6fmsKlaJ7oOngjiaLLMzu:kta4wfpKlEEOnKKu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33c5f2aee34e39783f68eef0916068a1_JaffaCakes118
Files
-
33c5f2aee34e39783f68eef0916068a1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 550KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE