Static task
static1
Behavioral task
behavioral1
Sample
190df18b816128389ea99c0ed0e55f32_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
190df18b816128389ea99c0ed0e55f32_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
190df18b816128389ea99c0ed0e55f32_JaffaCakes118
-
Size
1.2MB
-
MD5
190df18b816128389ea99c0ed0e55f32
-
SHA1
1fab0f992d1f849e78140dc772eb1511297c1bb6
-
SHA256
87d3b6fbac91638674a9316e88ddc947d2a00724953d0e03bdd60d89e846615d
-
SHA512
fce7a3346fe9bcae916a07db50779793ec17827c267de9a424458b16ce78704fbeb918266581e5f8ae2714104e7cfa1dafcd74ce9b153e77feb109bea3232037
-
SSDEEP
12288:nRYco+gunQUnykqVNeN24eq0P1FF/iF15gDJLo2WjSRNHOt2wkMkHknk8hJ9G0z:n2ZunQUnaVNeN2xnF/8P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 190df18b816128389ea99c0ed0e55f32_JaffaCakes118
Files
-
190df18b816128389ea99c0ed0e55f32_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 480KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 352KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE