Static task
static1
Behavioral task
behavioral1
Sample
821f8c56e094f64e20bb8bf6662b2ef5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
821f8c56e094f64e20bb8bf6662b2ef5_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
821f8c56e094f64e20bb8bf6662b2ef5_JaffaCakes118
-
Size
13KB
-
MD5
821f8c56e094f64e20bb8bf6662b2ef5
-
SHA1
9c20a8d16fce714d14fc559d1fb5b8bebe0f7886
-
SHA256
8d442666fe316526d54dd63d6de5d28b611f0b83c2d79497881b5709f0ce5b96
-
SHA512
fc7fd8138ede8c1ecbcd267ac3aa14dde7feb3ff8172709b69119a36413fb0942ae0eb6e862148f7835a58f54c5291695db10718c6b31b817b93d09684d2ccf2
-
SSDEEP
384:fHgFiH3fyNa1J+29OMMSOsW5tkq9YphrlaFqjL:fQiH3fn+2VMvf5tkPtcFeL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 821f8c56e094f64e20bb8bf6662b2ef5_JaffaCakes118
Files
-
821f8c56e094f64e20bb8bf6662b2ef5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mumaba Size: 37B - Virtual size: 37B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE