Static task
static1
Behavioral task
behavioral1
Sample
194b988258b4ab3ed5fbf1fb4775e38f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
194b988258b4ab3ed5fbf1fb4775e38f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
194b988258b4ab3ed5fbf1fb4775e38f_JaffaCakes118
-
Size
43KB
-
MD5
194b988258b4ab3ed5fbf1fb4775e38f
-
SHA1
d0f3cda6fcc1540e64fd017607fb655d21238124
-
SHA256
cf11ae0ac34d906fb0e42f707264a19258ba8b26f4b00e0c8327962f06b1b019
-
SHA512
7b618c59a1510d2ea3c43b98474f9934aeb5ff50677465f4d35204344f505271e0682e6f328f1937f5dc15a983031483e8564c0c257d0e248b6665441da41eba
-
SSDEEP
768:b8ntvX3yaUD8jyvbg9o9PdGhCld4FaegFidOGdWtFFlc9dYG/NEFIu:b85nrUAqbao9P8hV4dFAJAHFKvlE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 194b988258b4ab3ed5fbf1fb4775e38f_JaffaCakes118
Files
-
194b988258b4ab3ed5fbf1fb4775e38f_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 41KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE