Static task
static1
Behavioral task
behavioral1
Sample
189ef58033a37aeb290dbc94bf4dfb19_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
189ef58033a37aeb290dbc94bf4dfb19_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
189ef58033a37aeb290dbc94bf4dfb19_JaffaCakes118
-
Size
66KB
-
MD5
189ef58033a37aeb290dbc94bf4dfb19
-
SHA1
0fb7c03ca0c5efdf9962cc667a16ffe85c8e897d
-
SHA256
49ee0d06e386bb80d0abba402a0fa0f3fadda59ce454371f0e2c5649385c5a21
-
SHA512
0f9be71c4058125788454baed56bd2cf9a31e3c16c01be508beb3c8584f8cdfff9de48fa4529c0871207a8c1df9f3ad3a100e79725dd128d79545144de69eba3
-
SSDEEP
1536:kmDWRgsNdgseTwSoNosdX+m5lssSHuc2sg0O9uhtXu7:jCRpngwSaFpB8Xu7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 189ef58033a37aeb290dbc94bf4dfb19_JaffaCakes118
Files
-
189ef58033a37aeb290dbc94bf4dfb19_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE