Static task
static1
Behavioral task
behavioral1
Sample
b21eeedbea65b5da41946ec478b6881b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b21eeedbea65b5da41946ec478b6881b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b21eeedbea65b5da41946ec478b6881b_JaffaCakes118
-
Size
840KB
-
MD5
b21eeedbea65b5da41946ec478b6881b
-
SHA1
3d89f67873bc6338d33c320a372b456110cd783e
-
SHA256
1d2f1054984a224c3aec671e1ffbcafbe0f2e31aa7e3e5a34ce80f3413112684
-
SHA512
c397d23917e5b99a1e1289769a8a41188af0da4e7a1351ab659877b00ae7fb4f2c250190a29a6819c14f9ff420d9cd1869bfb7207dc93c79a6702ab04a83ce32
-
SSDEEP
24576:DxlyCwAJbmxKzZDprn24JLm87ZPdMm7PDR7MP+h2z:DxlyPmmxs24xmiltDOZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b21eeedbea65b5da41946ec478b6881b_JaffaCakes118
Files
-
b21eeedbea65b5da41946ec478b6881b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 713KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE