Static task
static1
Behavioral task
behavioral1
Sample
18a5ef7049bc4837bf65ee8c0e3cb371_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18a5ef7049bc4837bf65ee8c0e3cb371_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18a5ef7049bc4837bf65ee8c0e3cb371_JaffaCakes118
-
Size
104KB
-
MD5
18a5ef7049bc4837bf65ee8c0e3cb371
-
SHA1
3825372a52f56f2fc2e5f6b16a63c87b24342992
-
SHA256
4df6f2be6d2dd1dba0f6c06f53c860e297142984886df98f4b8c4471aed4a7fc
-
SHA512
967f475ed216353227c867a048942d80b628dcd97f7b2a5b219eb0e817f0ce8be495834a10dd85a0fceae06ffa4d3045980c1d08724c375c652f87c4ad8c024b
-
SSDEEP
3072:16FLOmQM4D6Q+GUyk/f9K0kA1qO4x4J2vNbGfvGnd3gW5ZM4/u/L:UL1QtDQ11WNdndPZMT/L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18a5ef7049bc4837bf65ee8c0e3cb371_JaffaCakes118
Files
-
18a5ef7049bc4837bf65ee8c0e3cb371_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 49KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE