Static task
static1
Behavioral task
behavioral1
Sample
f21e3e2987081d832872ea29b75027e1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f21e3e2987081d832872ea29b75027e1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f21e3e2987081d832872ea29b75027e1_JaffaCakes118
-
Size
352KB
-
MD5
f21e3e2987081d832872ea29b75027e1
-
SHA1
d5c2923f22a35ac19902d96f1304c637fe26eb03
-
SHA256
537387d48f6dceccaad6eb42d0d51bd8d55fc4c8fec0b0fde869eb31462ea387
-
SHA512
5c94e1f8ab285bf3261183789de1b3146aa8b0fe2a01c62cfcc621865987e96a0a5ba3f2855d2a8957958491f946661b40d6c32838fe4dc46ec113b4345e0b66
-
SSDEEP
6144:6dYGe6dn2u9DYBctGz9h/0alnimYBeTaGy5XgaT1hVFSOn779Ox:6OGLp2u9DdGz9hBcONCgQ14K7Mx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f21e3e2987081d832872ea29b75027e1_JaffaCakes118
Files
-
f21e3e2987081d832872ea29b75027e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
dadsasaf Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
adssdada Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdassdsd Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
asadssad Size: 9.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE