Static task
static1
Behavioral task
behavioral1
Sample
18bb3bfe565d32e0ceca57cb7ba4c539_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
18bb3bfe565d32e0ceca57cb7ba4c539_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18bb3bfe565d32e0ceca57cb7ba4c539_JaffaCakes118
-
Size
218KB
-
MD5
18bb3bfe565d32e0ceca57cb7ba4c539
-
SHA1
ed35c4c940cdae743aa14a42a8dd2504ee9533d9
-
SHA256
1b2842c954e19e16db3463c8d50706d48850a0802ab9091d968edb8c3f87891e
-
SHA512
0ad9ad10f2e9889181f5e2453ef874acbc78c646f6a66b1f5fe418396f12c2346d43f777c88bebbf219633d92cf3c14c842fb18cd616d3e0428b5bd0e072af2f
-
SSDEEP
6144:T0v3MgQJkbji1zfEownw51seZHMvdfAr9ZRGKGXqdFi:8rbeJ8bnwUeH2dIxZ00+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18bb3bfe565d32e0ceca57cb7ba4c539_JaffaCakes118
Files
-
18bb3bfe565d32e0ceca57cb7ba4c539_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
PESHiELD Size: 209KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESHiELD Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ANAKIN2K Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE