Static task
static1
Behavioral task
behavioral1
Sample
19148389d859bbe3d92533ccfc802740_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
19148389d859bbe3d92533ccfc802740_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
19148389d859bbe3d92533ccfc802740_JaffaCakes118
-
Size
100KB
-
MD5
19148389d859bbe3d92533ccfc802740
-
SHA1
87ab0519dd2290b84b6f82271a971ee9b2438609
-
SHA256
cf97c2ae3daa4057e0e1f53697c30f42d5a3e3e470b5df04e2db961d5925fb43
-
SHA512
4ee43fb2c11e072ca3556ccb37b3df2985f1d2366c2a94b9cfc303b516d6a5e3f2665c6996c2732e1c12d3ab491fffa82a6413a2bac7bee0b5ca675258160836
-
SSDEEP
3072:AukI36nkN97tl1tJA8wLxgcmHZywES+IjrjbyHGgz6o4:/k8BN5ffa8wL/stoIjrjb8Ggz6o4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19148389d859bbe3d92533ccfc802740_JaffaCakes118
Files
-
19148389d859bbe3d92533ccfc802740_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
c92naah Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oniezpa Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8rb Size: 2KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE