Static task
static1
Behavioral task
behavioral1
Sample
19c1f9ec19c7f57be8706ee5b5bae491_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
19c1f9ec19c7f57be8706ee5b5bae491_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
19c1f9ec19c7f57be8706ee5b5bae491_JaffaCakes118
-
Size
432KB
-
MD5
19c1f9ec19c7f57be8706ee5b5bae491
-
SHA1
d25fd36675901a94202198071fc4f8b8acf318b1
-
SHA256
da255121a95500ac4c6256b7b20cccc40560928341e5384b53590067a3c81e2a
-
SHA512
8bd15b4374d9eecd9700c80da2c39941071827a09802ecbe8130440c46a7d14b8f2e16beeb56056fef5d18a441e76393839242a626a5007462cff37a069bdf38
-
SSDEEP
12288:3O45hXduMWcsIUN/iv9fZOq7JOHKApgZQPWfeDQk1W:e4fXRsIUGxOkOHK0kQo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19c1f9ec19c7f57be8706ee5b5bae491_JaffaCakes118
Files
-
19c1f9ec19c7f57be8706ee5b5bae491_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 288KB - Virtual size: 285KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE