Static task
static1
Behavioral task
behavioral1
Sample
196909ef5c390cd92ee6cd40afe4a8ba_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
196909ef5c390cd92ee6cd40afe4a8ba_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
196909ef5c390cd92ee6cd40afe4a8ba_JaffaCakes118
-
Size
61KB
-
MD5
196909ef5c390cd92ee6cd40afe4a8ba
-
SHA1
86952997f87b2c5ca8c541093c30a4c6a265c038
-
SHA256
4669ecde23391fd1aa75b05d2d0246eb32a14df2038c62c8b7c314c792581202
-
SHA512
3c8112d18efaab81d25aad3f4954c423b543f522434f27bd94343a24e8627754771f0404e0b916816ef25f0516e40a4b59ba6cf61b9ad11bc8d0f1d798ee9cd7
-
SSDEEP
1536:a9ys3AHibL7F3Kzk9VqO+3P7dlzYQOHmM/dJau1xXD:a9xQHYFeqVqO+f7X6fdJauH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 196909ef5c390cd92ee6cd40afe4a8ba_JaffaCakes118
Files
-
196909ef5c390cd92ee6cd40afe4a8ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
/APES/ Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE