Static task
static1
Behavioral task
behavioral1
Sample
186d4a34e5d98089e792df803877d217_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
186d4a34e5d98089e792df803877d217_JaffaCakes118
-
Size
128KB
-
MD5
186d4a34e5d98089e792df803877d217
-
SHA1
bbd85d692d4ecf739a414ca91a28cc5735d4fb10
-
SHA256
b8c08cf67f0fcf03ddd51c4f1f34516407612917c7001b807d1f42249b1b5b50
-
SHA512
fd82835fab6cb38f8fa2e342acaa0c6cd90a47d0d86b5da547fa0775c9366156f500e51c08936fca1893dcc5063bcb478a22844f61c9d234249bb17ed71bb112
-
SSDEEP
3072:uGHi6mw/pipu4HmlXP7ar+HciptwDmoowfaJd:+opD4HmXPXcisDmook
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 186d4a34e5d98089e792df803877d217_JaffaCakes118
Files
-
186d4a34e5d98089e792df803877d217_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE