Static task
static1
Behavioral task
behavioral1
Sample
24d763c322382b1b26fe699d489a12c7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
24d763c322382b1b26fe699d489a12c7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
24d763c322382b1b26fe699d489a12c7_JaffaCakes118
-
Size
1.2MB
-
MD5
24d763c322382b1b26fe699d489a12c7
-
SHA1
3dc432602a3e99e9fbd528eda5e350582783a0f9
-
SHA256
d8422a43be11cc1c546be07cea328e21c031eac3041402ef6e2a97b5031aacdc
-
SHA512
1bfdfd65debdc9b64ef4db7975b780fc8bb4e0f1bc9b91dc7298909173fedd50a6300e5e5c1a397ccec86ea38d65e484e996dfa509e79dac308a8e8cdfe05ed3
-
SSDEEP
24576:GgjYkgZtZSmuHBmjXisACvKrAet4tGcmT430gYtOvN9OD+yzXRVU:Gg8kgZtZApsHDt3S4dODlzXo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24d763c322382b1b26fe699d489a12c7_JaffaCakes118
Files
-
24d763c322382b1b26fe699d489a12c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1.0MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE