Static task
static1
Behavioral task
behavioral1
Sample
33b81e4d15525615da2f7eeb4815f93b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33b81e4d15525615da2f7eeb4815f93b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33b81e4d15525615da2f7eeb4815f93b_JaffaCakes118
-
Size
545KB
-
MD5
33b81e4d15525615da2f7eeb4815f93b
-
SHA1
bdbd7cd3f5703dcbba756e6585ec41cf36c099ff
-
SHA256
c40304d01a9cced81c96eb96093ae370662d9178686518f610a01a9c715f5707
-
SHA512
647d2325462aa97b120e8d44104aedac9785a6b35e78935425f7559d7ba1f562f68b45cec487f714645e995fc806b4f4ea4a3f98cca660056d5d747422b6481f
-
SSDEEP
6144:xdR3xR+SwdulKv6hr8GsugxNDz+F2idZecnl20lHRxp3g637ll5LiIoB1kM60nRH:xq9Y865sugxFmF3Z4mxxFlDiI4TnRH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33b81e4d15525615da2f7eeb4815f93b_JaffaCakes118
Files
-
33b81e4d15525615da2f7eeb4815f93b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 220KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE