Static task
static1
Behavioral task
behavioral1
Sample
18b9929b336453b9fc5569eb146e1f97_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
18b9929b336453b9fc5569eb146e1f97_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
18b9929b336453b9fc5569eb146e1f97_JaffaCakes118
-
Size
128KB
-
MD5
18b9929b336453b9fc5569eb146e1f97
-
SHA1
73cf763870ca568e171e7fe2c402213134dc13c5
-
SHA256
8cce54e54b04ed27371a39617d3617756b47bcae720b71eb68c265a4087efe49
-
SHA512
55173c23b86930bc32a41da4681b56fff6c24d3518faad8ece81d52311ab8ccf02017b27c2eb1dbcd905069b592e811a363815e536ed1190e4d2371c1f68d5ff
-
SSDEEP
3072:X55OMDt2iVTNJNvtsBrVl9C3W+FMJe9LPqScX2YZAe3juGuTP:60NNJABrVl9C3kwLPOXHX3yP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18b9929b336453b9fc5569eb146e1f97_JaffaCakes118
Files
-
18b9929b336453b9fc5569eb146e1f97_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
jd5w Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n2j4 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
neld84 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE