Static task
static1
Behavioral task
behavioral1
Sample
195db0ec4d0459379ff22ee83e0ca5b7_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
195db0ec4d0459379ff22ee83e0ca5b7_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
195db0ec4d0459379ff22ee83e0ca5b7_JaffaCakes118
-
Size
686KB
-
MD5
195db0ec4d0459379ff22ee83e0ca5b7
-
SHA1
18ee020fef022bf3800b9a3221908338757b10da
-
SHA256
69b21802dd055e16c906a742dc11f03b496195992d05a591908a13e24caeb37f
-
SHA512
3393f6115667d5b0f860f7403e11a4631430db05e4da4894b309fe6c39e9798d89257a1bc0721826778172e5fad13033cf160ddff9c7a9259d27889fd0f1257c
-
SSDEEP
12288:sPLCoSxCJCoZRChMNolSHeaDNIMojOnhkM+yTYHY941Tpm:ujgKnIVyXCTKhJH6Ya1T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 195db0ec4d0459379ff22ee83e0ca5b7_JaffaCakes118
Files
-
195db0ec4d0459379ff22ee83e0ca5b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.kd}[l>, Size: 608KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.uAWJ/Zz Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HL*LEC/ Size: - Virtual size: 15KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.B_2@M$P Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.{u}jAA& Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.,?bAA|9 Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdLj)S! Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Q,hUipp Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
.,?bAA|9
-
.B_2@M$P
-
.Q,hUipp
-
.fdLj)S!
-
.kd}[l>,
-
.uAWJ/Zz