Static task
static1
Behavioral task
behavioral1
Sample
19ee14f0d44d42e883a0e6c6b0bfa083_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19ee14f0d44d42e883a0e6c6b0bfa083_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
19ee14f0d44d42e883a0e6c6b0bfa083_JaffaCakes118
-
Size
13KB
-
MD5
19ee14f0d44d42e883a0e6c6b0bfa083
-
SHA1
ff84ac129c2b43ee22dbbed647114f10e79c345a
-
SHA256
ad1811a5b1f6a7e73aba4ef501087d816da97849acdfb2262049af786ac23288
-
SHA512
6544c7a5ed724a62c69d608ed4008885018798e8ab2e02586bdce3eccd63dfcde0b9f4c03bf5e9bf6215f6dde040d56e69c0d5714ae8854ac177e388192153c9
-
SSDEEP
192:3JGc1Zl2SVAfNxl1THs6xgzgsGjPlRfHL766nQAzXIsdbg6TVAInmt:3JGcMlxDTHfwmFrhYstTUt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19ee14f0d44d42e883a0e6c6b0bfa083_JaffaCakes118
Files
-
19ee14f0d44d42e883a0e6c6b0bfa083_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ