Static task
static1
Behavioral task
behavioral1
Sample
19b0f7c0b64448e4d3cdc1fcb5c7c85c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
19b0f7c0b64448e4d3cdc1fcb5c7c85c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
19b0f7c0b64448e4d3cdc1fcb5c7c85c_JaffaCakes118
-
Size
102KB
-
MD5
19b0f7c0b64448e4d3cdc1fcb5c7c85c
-
SHA1
dbf22b33b24699a0f94ca84b574eb71fe58d4e66
-
SHA256
a71d79d2d0f29e0ba7b3dae12e0150338f20c65a2514f1ebc6812a02b590c484
-
SHA512
ffb0eca368133ec330c45a08c72eddcbd8429f40a42abffeb663af7490fe6bd4c8f85400b309b7b124b7f424efbb573cbd6e670977fee6506a82c099a773ba10
-
SSDEEP
3072:samc9x9gzWbKsXjDf7oOetHdGcWOvvmX8F:v8zeTzEvwcWOv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19b0f7c0b64448e4d3cdc1fcb5c7c85c_JaffaCakes118
Files
-
19b0f7c0b64448e4d3cdc1fcb5c7c85c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE