Static task
static1
Behavioral task
behavioral1
Sample
19cba72901f33de7b762f9788cc86038_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
19cba72901f33de7b762f9788cc86038_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
19cba72901f33de7b762f9788cc86038_JaffaCakes118
-
Size
371KB
-
MD5
19cba72901f33de7b762f9788cc86038
-
SHA1
c1df2246013881168c101306e989dbb401c284fe
-
SHA256
94230a66edf968de2ad38bf0dce3d450adb26194cef2a2d15f8a0d54dd10c6c7
-
SHA512
8b78d5522140e3c598b7fac222e652ad3522a944f84b9e68bcf7ca80937e20e1f4fb1e57e31978b58605af9dcc8bd6bd2c0c847faf0bef03132ca9962bff45fe
-
SSDEEP
6144:AKvf+NgElN4mrhteIf0vlA52FcaAhIBHDubRBxFEzwLlG+rPqdx6/LOO6NH3Cr1Q:z5GSmrrem2f8YIRPFEkLI+rnTOOeXC6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19cba72901f33de7b762f9788cc86038_JaffaCakes118
Files
-
19cba72901f33de7b762f9788cc86038_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 370KB - Virtual size: 388KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE