Static task
static1
Behavioral task
behavioral1
Sample
18dbb93ebea72c9d6b7fa99c959b0149_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18dbb93ebea72c9d6b7fa99c959b0149_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
18dbb93ebea72c9d6b7fa99c959b0149_JaffaCakes118
-
Size
77KB
-
MD5
18dbb93ebea72c9d6b7fa99c959b0149
-
SHA1
f83bf56948c80740153b6384da0664e05eb8411e
-
SHA256
5a51cee43c6e491b1bfd1da4126d0b64fe64dd10cfd949d2e1dc37c1b6ba2d9a
-
SHA512
fe7bf79d9a9716b7661f740d774933f2c6235aad4b2fe4a09d95872cf6abe9411317b6f11dfaf1a0fa0f33ec241f7a2985f7bc42438e4221671f4f5797819c72
-
SSDEEP
1536:0xByroQdfdIxLgSUl1jtUVboSJPG9wqEUFwGPeN4tT1iws8fAandwYw8v:iSFIxCl1UbC9wAVPeNPws8fzOLm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18dbb93ebea72c9d6b7fa99c959b0149_JaffaCakes118
Files
-
18dbb93ebea72c9d6b7fa99c959b0149_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PESHiELD Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESHiELD Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESHiELD Size: 10KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESHiELD Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ANAKIN2K Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE