Static task
static1
Behavioral task
behavioral1
Sample
33bdc6affefa0b86b3f93bd2ef26ba00_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33bdc6affefa0b86b3f93bd2ef26ba00_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33bdc6affefa0b86b3f93bd2ef26ba00_JaffaCakes118
-
Size
113KB
-
MD5
33bdc6affefa0b86b3f93bd2ef26ba00
-
SHA1
87eb5727d9c703b959875a6d4f4ea1eeb7fdef62
-
SHA256
ee47ec01a0c719d72bb034db2234e1992f55e9072bcc7dd0d9162ba2453ed41d
-
SHA512
063871ea8190684069f3613d3f7518e7c90fc03f97a428220bf7968cf041dfd4f335f9e069352878a7ef29d61796d80f44575d845604a6c168239fd3e782c81d
-
SSDEEP
3072:xehvZ5uwVI0HcqWFNazxjmNdX0/lP0rDTtv01eb67:IhvDpGvNazp89mlsDh01eb67
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33bdc6affefa0b86b3f93bd2ef26ba00_JaffaCakes118
Files
-
33bdc6affefa0b86b3f93bd2ef26ba00_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ