Static task
static1
Behavioral task
behavioral1
Sample
193839a2d9b96716b4fc1c8146986931_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
193839a2d9b96716b4fc1c8146986931_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
193839a2d9b96716b4fc1c8146986931_JaffaCakes118
-
Size
6KB
-
MD5
193839a2d9b96716b4fc1c8146986931
-
SHA1
69c814e1634afd9831a18e875d2e8bc8a91fa474
-
SHA256
e46e5ad0e8390b3368b47e5d69a26cb4a8fd0a8380ac39e577139fedfe4c3a55
-
SHA512
b7fc54dbac29bda8bad8af19e3c2bb860fe5c5cb06647efa7eb57ee3c8a735cace4139cd7291f25091953a119840e8e3de5a18077ba3ba0d1232e56b6a6e70c4
-
SSDEEP
96:kbtExc1Ldajg2WNnVxKXPNxl1+TgHX86JHAkUGn8Wr4A9lE2u1N:kJGc1Zl2aVAfNxl1THs6Jg1GjPlRK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 193839a2d9b96716b4fc1c8146986931_JaffaCakes118
Files
-
193839a2d9b96716b4fc1c8146986931_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE