Static task
static1
Behavioral task
behavioral1
Sample
c24c188a8d8be3cb5e389d07f82d684a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c24c188a8d8be3cb5e389d07f82d684a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c24c188a8d8be3cb5e389d07f82d684a_JaffaCakes118
-
Size
128KB
-
MD5
c24c188a8d8be3cb5e389d07f82d684a
-
SHA1
87e4f1a04c054546c26b95c6f1a62fbf58258e84
-
SHA256
4405d18fc5c5d2dcfb00482864327106469c53177e41b795e145852a9671d477
-
SHA512
4943d1a17575d6d509ab5ad12ec7df8acfccd7fd5188dc6065b5e3453d8b51979b7044ae83d7ab1e978347bb8bda9903262cbfcc17e31219c5846335608bcc18
-
SSDEEP
3072:uGHi6mwJ51zbCuJp33StFbnwGSvUqAWgYdBmow:+eLSuJ53SYGScWgY3N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c24c188a8d8be3cb5e389d07f82d684a_JaffaCakes118
Files
-
c24c188a8d8be3cb5e389d07f82d684a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE