Static task
static1
Behavioral task
behavioral1
Sample
188de854afcd453c3bdf88dea57853f4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
188de854afcd453c3bdf88dea57853f4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
188de854afcd453c3bdf88dea57853f4_JaffaCakes118
-
Size
20KB
-
MD5
188de854afcd453c3bdf88dea57853f4
-
SHA1
5a3ea82f40ea7a16271b6a5afd5305f93b6dcc53
-
SHA256
985388560ed66da6653140742d3932f60fa4e87620e99079e6d88c3bba739d70
-
SHA512
733d1045b2694f3506b6008fac195ea42b61f35edf1a2ccaea9d74a1fcd3c83b45eccf2ed7932e1660b35d27b2fb3638f758c782ec1110d1b576c2fd886d8aa6
-
SSDEEP
384:29QZ5bG3TR7FLZUQ+1QmzX/4f/iec/5jgcMnYH2DsQzuqmJBnrRbxJQI5jpQ6:wgG3NNZUQ+1QmzX/4f/+/efnYHwsQzWT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 188de854afcd453c3bdf88dea57853f4_JaffaCakes118
Files
-
188de854afcd453c3bdf88dea57853f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ