Static task
static1
Behavioral task
behavioral1
Sample
185781dbf2e9408e6dec3cbfabd13bd7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
185781dbf2e9408e6dec3cbfabd13bd7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
185781dbf2e9408e6dec3cbfabd13bd7_JaffaCakes118
-
Size
210KB
-
MD5
185781dbf2e9408e6dec3cbfabd13bd7
-
SHA1
be993da2bd2e04e9c25b954d3a01b27c9bcced3c
-
SHA256
fb3b36bccbb23d02856d10530a487af89f1925b34b0fbded3e3f21663884e7da
-
SHA512
9e86ced4cd982f9ca8f3ab7979a79cf6c822976f6f11e0e2af04d0cded0240bdec10ee09f8438e1a6fa73b96863c21cc4074ee24c5f548bd46eb953fd7b2fb8d
-
SSDEEP
6144:KiqvdXjJwTcgPphM3mGcd/OjZ+7SA/878IzOzZdwXg:KigdXlwIwM3mGclOVgSohN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 185781dbf2e9408e6dec3cbfabd13bd7_JaffaCakes118
Files
-
185781dbf2e9408e6dec3cbfabd13bd7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 205KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 227B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE