Static task
static1
Behavioral task
behavioral1
Sample
19c107c12b2e96e39e2b92d16cae7fcf_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
19c107c12b2e96e39e2b92d16cae7fcf_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
19c107c12b2e96e39e2b92d16cae7fcf_JaffaCakes118
-
Size
113KB
-
MD5
19c107c12b2e96e39e2b92d16cae7fcf
-
SHA1
4ebafb165c8c2d4eee78e4fe2b95e91ddf4ea0cf
-
SHA256
d5bf94649bc1de000be8aa7baf9e96be6f8d8204d91dc537fb64bd0c3c943ca5
-
SHA512
911741b98ee780cd168524932e35ec22684bc0c755609603a7b57cd1e02476e29743c807de021f30557228a40674431c83d7ff2b03a251cf35eb0ff194b0cc1b
-
SSDEEP
1536:lKoLd49gI1kn2A9xalVtiZ/beoRPXyVFBX0DBFb/AMWKbXCxElh7HGMwGn0YKGAc:T6gg+xyt6pV9FAMWKbRn7HGMlKGmZq0+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19c107c12b2e96e39e2b92d16cae7fcf_JaffaCakes118
Files
-
19c107c12b2e96e39e2b92d16cae7fcf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 336KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE