Static task
static1
Behavioral task
behavioral1
Sample
19c1627a1272f4a316b9eb9c74c9c6a2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
19c1627a1272f4a316b9eb9c74c9c6a2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
19c1627a1272f4a316b9eb9c74c9c6a2_JaffaCakes118
-
Size
14KB
-
MD5
19c1627a1272f4a316b9eb9c74c9c6a2
-
SHA1
0b2eb38eeca2119afc28bfedb88973c04ad009bf
-
SHA256
65296c92390b4493136bc1286110c7d02fce3dd52a21d34e3d839419e52f247d
-
SHA512
5b4ca68d5a7d56c620fe528bb4e6b3a64354f6db99b33bcc2cadc9822de895d21d4148127ff8ea2129caf1a3d8a0b5ffed591d56a4c0a65553a24b650751235f
-
SSDEEP
384:ys4WL6sefvUbGoPqEFD5A37Yu25+7x9Rru9SWw/1:yg6BUKSqEFS25qL51
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19c1627a1272f4a316b9eb9c74c9c6a2_JaffaCakes118
Files
-
19c1627a1272f4a316b9eb9c74c9c6a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
4x Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
s Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2e Size: 963B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE