Static task
static1
Behavioral task
behavioral1
Sample
198903fa0d8da0fe7dd7aadf097319a1_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
198903fa0d8da0fe7dd7aadf097319a1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
198903fa0d8da0fe7dd7aadf097319a1_JaffaCakes118
-
Size
624KB
-
MD5
198903fa0d8da0fe7dd7aadf097319a1
-
SHA1
6be17f22e9ef67822f52eb76fe58f7ae868ee6b9
-
SHA256
84f3decc8f3b0a725bddbe332b5a6a82c36f6c681b38d336ce3e958cfab8649b
-
SHA512
c0160e64c3780b68b9fa874e8d683ce94df7703895973df7db07958d3f15b91478672ea4dd0e39484c9474b94bce6f9cdca8781fa42b1abb4f5b3d8921eda9b6
-
SSDEEP
12288:YVn4oDAr2ZYX3JiqmWjZrm6SdxMC50aCPzC44L21NtWpm9QtN:YVnsX3Ji7W86wxM4Ck63tW7v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 198903fa0d8da0fe7dd7aadf097319a1_JaffaCakes118
Files
-
198903fa0d8da0fe7dd7aadf097319a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 36KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rhkv Size: 508KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE