Static task
static1
Behavioral task
behavioral1
Sample
196e49464f7208f1213731eb4f44e078_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
196e49464f7208f1213731eb4f44e078_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
196e49464f7208f1213731eb4f44e078_JaffaCakes118
-
Size
413KB
-
MD5
196e49464f7208f1213731eb4f44e078
-
SHA1
5583070f239f667d79df20654a32592cc38081b4
-
SHA256
621a4b89a107b3eba54fa2b9e32e7c7626eee2e3d44adcd259ea3a6539d3f5b7
-
SHA512
7b2dc52adc22d8a50cea6f7d7cc8861ca21ceffe0516778030072083278ba04e48c744bbedfafd7a3bc9e706975304e58463f251c65edc3559c4ac3c2d832a66
-
SSDEEP
12288:bV76ss84w1N91VjAH79eWC4d5pDaLkgyyx:F6sDjFkb9eW/dbDaY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 196e49464f7208f1213731eb4f44e078_JaffaCakes118
Files
-
196e49464f7208f1213731eb4f44e078_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 392KB - Virtual size: 799KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ