Static task
static1
Behavioral task
behavioral1
Sample
c21a8becb696e9becb8e37dfd8a60c79_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c21a8becb696e9becb8e37dfd8a60c79_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c21a8becb696e9becb8e37dfd8a60c79_JaffaCakes118
-
Size
22KB
-
MD5
c21a8becb696e9becb8e37dfd8a60c79
-
SHA1
783cd72fbe8ce652a66cb38aa2d2bd7b2c6c9b6c
-
SHA256
d929b907fe731d828a5f80864c65b989ba59ef382a627e1dfe50e924b3c48167
-
SHA512
eb25f787d33e977bddcc10312a957f58e4db32e566410038f2584a7edb9175fdcbc5a9dee7a66c5cd1ec5e23a64ca0a3b3219741780690f1996d19c1e4a4fa40
-
SSDEEP
384:YSgqdH5GOuatzDMvZhheyE0+p9EphW2MJeCG09K616oJXWXZ:NZfnMvNJE0QOo2eR461HGJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c21a8becb696e9becb8e37dfd8a60c79_JaffaCakes118
Files
-
c21a8becb696e9becb8e37dfd8a60c79_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: 431B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 21KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE