Static task
static1
Behavioral task
behavioral1
Sample
190ac58248941aa5dc4a6b587629dbf0_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
190ac58248941aa5dc4a6b587629dbf0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
190ac58248941aa5dc4a6b587629dbf0_JaffaCakes118
-
Size
5.6MB
-
MD5
190ac58248941aa5dc4a6b587629dbf0
-
SHA1
5b0bc2c8c0269ff2abcdb6276a666461b06b56d8
-
SHA256
988e698357ceb60662b01a83f6ccf80435ba4ca76f2913f215510f4d51fd9f67
-
SHA512
1767403393b6a6f38270fd0f2f9f1bc85b32f4c7f31ad74912395db9fee9f40614d8fba96a86e3edba2200738db3cbe57ac34d1bd64da71636d25cf9e7a1a763
-
SSDEEP
98304:L55QpVA7Pkrgv+loFo4RS8bLQkpG/+61reqGu7+6tmKhjTY:96nAbk8Wlqo4U8bLlS17GtKh4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 190ac58248941aa5dc4a6b587629dbf0_JaffaCakes118
Files
-
190ac58248941aa5dc4a6b587629dbf0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE