Static task
static1
Behavioral task
behavioral1
Sample
198ba94cc4b9e1eee3b4edde9fd125c8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
198ba94cc4b9e1eee3b4edde9fd125c8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
198ba94cc4b9e1eee3b4edde9fd125c8_JaffaCakes118
-
Size
57KB
-
MD5
198ba94cc4b9e1eee3b4edde9fd125c8
-
SHA1
5abb14a55aa1607eed9f588877318063d3dbdbe6
-
SHA256
1093b7d4ac0ab4b42b26d571f7b96caf347c3fbbe2925ecc31a56e76dd97ded0
-
SHA512
bedf19ce1198f0ba4cd830d42d708f381a9ba6851c967be7a6c29dc585409e7e29bfb9437d12a6207425da5bc54025e54bb77f16fa69e215371d89f45259791b
-
SSDEEP
1536:xp6UL6tIu6Fr3pR7fVBf1tVU/5UdBFOGFitlaNkc:xh+t56JrfP1ts2dHOGwtwW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 198ba94cc4b9e1eee3b4edde9fd125c8_JaffaCakes118
Files
-
198ba94cc4b9e1eee3b4edde9fd125c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 159B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ