Static task
static1
Behavioral task
behavioral1
Sample
33c1132a476246224bf259071afdaffc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33c1132a476246224bf259071afdaffc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33c1132a476246224bf259071afdaffc_JaffaCakes118
-
Size
41KB
-
MD5
33c1132a476246224bf259071afdaffc
-
SHA1
3b9cfa876c6200930b75b73c8b96f703daeabf7a
-
SHA256
1bc38cd1fd242e33068c0f0327dacb5bffc9080e6a5d184679314cc23b06b5bd
-
SHA512
43eb3c46d0970f31a98a6aefa84d39d4b4d18c62e2e430b3f56c191ae7f3988bbce8b8bdcfefb2e3c3f4ecbe22c98610e25cf8f6aa000df19ca328a15243214b
-
SSDEEP
768:oQosaysesI0Y57VMDqxgJ4kxdTH+cxP5NiPpP4uHYZ7t31HYzl2VjkAzZMO:otO57VcWknSSgDI51HuMkAzv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33c1132a476246224bf259071afdaffc_JaffaCakes118
Files
-
33c1132a476246224bf259071afdaffc_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 661KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ