Static task
static1
Behavioral task
behavioral1
Sample
24e720c8ea6d9432b37c8b4deb1d3012_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
24e720c8ea6d9432b37c8b4deb1d3012_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
24e720c8ea6d9432b37c8b4deb1d3012_JaffaCakes118
-
Size
184KB
-
MD5
24e720c8ea6d9432b37c8b4deb1d3012
-
SHA1
4f7f7bc471ffef9ec886134e3dd6889a2a438126
-
SHA256
7d3a9e46bd0ce0b79540619073c32fcbf50883b2f1dbe129d06ff695938bb57c
-
SHA512
d2e7edb326b29beaae24eeab7a6a487cae7b08a061147d2088b4f3ab72df0e36a0197c69ffecd306634ce586b99d330fe14b28fa851991621f99a56e7b3826a8
-
SSDEEP
3072:xuRroT0xcOAEAmjyMhnOc8AMUXYMTxXldk7xKDP7VylPvpFv:xuhoxDEAhMhOc881BlylPvpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24e720c8ea6d9432b37c8b4deb1d3012_JaffaCakes118
Files
-
24e720c8ea6d9432b37c8b4deb1d3012_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ