Static task
static1
Behavioral task
behavioral1
Sample
19659bce2cf8121c48690fb42b4c09a1_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19659bce2cf8121c48690fb42b4c09a1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
19659bce2cf8121c48690fb42b4c09a1_JaffaCakes118
-
Size
3.5MB
-
MD5
19659bce2cf8121c48690fb42b4c09a1
-
SHA1
bf720d49306a9b73baf3d65daa4a638dd54d8cd4
-
SHA256
5563d0e65d76ad7c6f92f0780b2bd8909a89494dafc5b1d63edbcecaf0ae3b3a
-
SHA512
189ecd70dedd5f8e2e2d13daa89151afc24231f335538772498f10cd723c5b35f38549244ebb29f33f410c8b0d37b472b8aa69827f22d00df9ee9cbdb27c8f70
-
SSDEEP
49152:bUqWKI9P2CQOubIbAAI+d2Lb/8PwvJ/NMI4aaQdtLfK6/fmkDHDLRoGQTDJkrM0P:cKI0V8dmawlD4anLrfmktGJkrylq3MzS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19659bce2cf8121c48690fb42b4c09a1_JaffaCakes118
Files
-
19659bce2cf8121c48690fb42b4c09a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 12.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE