Static task
static1
Behavioral task
behavioral1
Sample
19290de9604594276607bdf254be7fd8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
19290de9604594276607bdf254be7fd8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
19290de9604594276607bdf254be7fd8_JaffaCakes118
-
Size
597KB
-
MD5
19290de9604594276607bdf254be7fd8
-
SHA1
993e1d6db21bf295694f0485caef86d1c1cc54dd
-
SHA256
31708616d8a8582940790df0b3e28972baa9aa27ae75f92700cb2eed051066fe
-
SHA512
eb8b8e5b7f4636319fd1e5e9d49da1d6cffc978e241583ffe8f9c6015f5ff5ee7033bd60c96ee44bbdc52aa0318700d0d322c7162dc1001026c6cdcd390a0eba
-
SSDEEP
12288:Q2CKE3JI2PhihwvC64xo6F3Z4mxxsDqVTVOC4zP:Q26dYEGo6QmXLVTz4z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19290de9604594276607bdf254be7fd8_JaffaCakes118
Files
-
19290de9604594276607bdf254be7fd8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 273KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE