Static task
static1
Behavioral task
behavioral1
Sample
021ebbf3751e316f20f6e4a59703cbd4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
021ebbf3751e316f20f6e4a59703cbd4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
021ebbf3751e316f20f6e4a59703cbd4_JaffaCakes118
-
Size
633KB
-
MD5
021ebbf3751e316f20f6e4a59703cbd4
-
SHA1
6bf4c3c934ed9c7d0e1302dba541f801e3925765
-
SHA256
a5ba8bff1d333e8de0ac680c6c02de4ab8ad2281b3eaa1f9ec135d0e1ecabd5c
-
SHA512
3e921aa21d6e4e024bcb298a67d53b9df892ae878ea33edd8760d7f36a5764bea8377604193b05e8ff865d40ed402d2e6f30bf070a7dc609514175e30a9a2689
-
SSDEEP
12288:/z05p/hXiGGK0cH1c1PSyAnH0UQWFWDjDKmTl/gl7+QwL:sJhX9GK0ciQI/+mTRgcd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 021ebbf3751e316f20f6e4a59703cbd4_JaffaCakes118
Files
-
021ebbf3751e316f20f6e4a59703cbd4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 238KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
update Size: 389KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE