Static task
static1
Behavioral task
behavioral1
Sample
18b2e0b00b46cae1f400c5bb9bb3a1aa_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
18b2e0b00b46cae1f400c5bb9bb3a1aa_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
18b2e0b00b46cae1f400c5bb9bb3a1aa_JaffaCakes118
-
Size
55KB
-
MD5
18b2e0b00b46cae1f400c5bb9bb3a1aa
-
SHA1
3d9e8a8cd03b2258ae4422c3af1ff852dd49c424
-
SHA256
4336fe8ec56174605dc3b161cd0d040b087e51fd8aca8c79109193f0146e13cc
-
SHA512
3c802afae7c5b06304698d80b7f8bd3b440ac353f862ea2064e42563a65813214e4d7f9673284aa428038f9f01ca854dfe1831772f2d475fa3a67949df7dd93c
-
SSDEEP
768:vxSThgoFPEU6GX9kTO1VAxZ30oP2/j4U80+iPS+VWynbcuyD7UL1xSIioyAS81DX:ho9RXskgZYE1iPS03nouy8omb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18b2e0b00b46cae1f400c5bb9bb3a1aa_JaffaCakes118
Files
-
18b2e0b00b46cae1f400c5bb9bb3a1aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 652KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE