Static task
static1
Behavioral task
behavioral1
Sample
159cc54b6613890e17c3d549e3a087ca_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
159cc54b6613890e17c3d549e3a087ca_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
159cc54b6613890e17c3d549e3a087ca_JaffaCakes118
-
Size
12KB
-
MD5
159cc54b6613890e17c3d549e3a087ca
-
SHA1
f6f4ee19d365a172d6a7f8b3f4c54c92887fbbad
-
SHA256
d5429e16cc4d3bc09602692e76bacb0c9719bceff4198149387dbbde03688e71
-
SHA512
66de416f2154becec25e9a3752b48712a0f39139103c5b31e9d8813a5f42f9f26bcb6f3dad6fd0fcf429bb86b70e601ab6f0c0167ee2fe6643dd4c835875736b
-
SSDEEP
192:mKx3CMChGOuyCN67sBAZt+I7P1PAEyIhDca2vfxURjLmBp9Fv+KKYsiri+c:mKR1IGOuyCo7sBAnrPA9VlX+2BxTsi1c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 159cc54b6613890e17c3d549e3a087ca_JaffaCakes118
Files
-
159cc54b6613890e17c3d549e3a087ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
,>0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
,>1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
,>2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE