Static task
static1
Behavioral task
behavioral1
Sample
24d08c9b1f1b1a8582860cb03475d79d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
24d08c9b1f1b1a8582860cb03475d79d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
24d08c9b1f1b1a8582860cb03475d79d_JaffaCakes118
-
Size
152KB
-
MD5
24d08c9b1f1b1a8582860cb03475d79d
-
SHA1
2d44d88f3f2b851a4bbfced4d56ec6c4f68e94b8
-
SHA256
7542dea1548244e0a378f8ab3ceaf1075f9f3d300ce8a46a4ce58dbfccb827b3
-
SHA512
51b01c8a7b1c8a1015a0c9b30b6a91e597bb287992504b28226c1798f1d15ffa52e07e6e83813ac29360def08ef6790f42a42df48513a9807f434c9672b84e9c
-
SSDEEP
3072:ZS7+O1yJ9e7NS/ssPl/AggjapggUVFycOcwqdo:ZS71yC7vjjWgg8dfwqdo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24d08c9b1f1b1a8582860cb03475d79d_JaffaCakes118
Files
-
24d08c9b1f1b1a8582860cb03475d79d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ