Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_21c96523ffef7141596f778038e81489.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
JaffaCakes118_21c96523ffef7141596f778038e81489.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_21c96523ffef7141596f778038e81489
-
Size
1.2MB
-
MD5
21c96523ffef7141596f778038e81489
-
SHA1
644ee3e54862ddcc2fcca0a80b3ebbe5fa5d3cdc
-
SHA256
761be35bfcb634db78cfafd575cdacad5f1d1548f8a2aed0b06fcc4f5a8b192e
-
SHA512
31aea96ac659c2786011bdbc73d94e13ed803ac7d2820a71419462e565de7b121562c7b126b91107d3114fb554e0306ae8fc1c936f1baed770ef71fa6e0b3921
-
SSDEEP
24576:Q5Jiux82WOLDMMUTo6S5jSRBJclqLQO6tXaIHPbGRYyVvGnr5pzvtQzc:48ux8ALD7UJC/lyQOMXaITGRYysnVpZ9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_21c96523ffef7141596f778038e81489
Files
-
JaffaCakes118_21c96523ffef7141596f778038e81489.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 314KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 622KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE