Static task
static1
Behavioral task
behavioral1
Sample
33ec2427efbe1dd71ab8fa81df53c35a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33ec2427efbe1dd71ab8fa81df53c35a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33ec2427efbe1dd71ab8fa81df53c35a_JaffaCakes118
-
Size
533KB
-
MD5
33ec2427efbe1dd71ab8fa81df53c35a
-
SHA1
8261da7b97f704281dcaf76f0e6e8eb9a3e4fc2c
-
SHA256
7688317b4b01cef437c1759f7ae9adca1927972369d31968d67247299920dbfc
-
SHA512
4874ba69a9c1b32b3103be97759187266cf46b0401f54004f58c4d063d1199093f34c95be95b51009a1d72ee58a2f16a69370ec317da7bd96ce74ef6e39c068a
-
SSDEEP
12288:1L/ODM+xGkgREC6ua+T837j+wZh4IU2iB/7qhDxlvDUd9rlMk27:1LmdxNyHas83WwW/B/gLoW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33ec2427efbe1dd71ab8fa81df53c35a_JaffaCakes118
Files
-
33ec2427efbe1dd71ab8fa81df53c35a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.chyd1f Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3$$sa3 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.59vpoy Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.emn49w Size: - Virtual size: 10KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uc73xe Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gyumoy Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.h4ptbd Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.6eh09n Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 415KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.debug Size: - Virtual size: 3.0MB
.packed Size: - Virtual size: 424KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.info Size: 528KB - Virtual size: 532KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE