Static task
static1
Behavioral task
behavioral1
Sample
3189f5c90ee753088cb1c7dca9923598_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3189f5c90ee753088cb1c7dca9923598_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3189f5c90ee753088cb1c7dca9923598_JaffaCakes118
-
Size
16KB
-
MD5
3189f5c90ee753088cb1c7dca9923598
-
SHA1
3c1db09a36f2d721d624a6a3e3d0cfab2a3a9d6f
-
SHA256
cf70c0edf7a6b92d8383fe2212de40f3190ffa68be89cca92cb8b18f127e6161
-
SHA512
1648dbbd82298e53d70088ad04b1f23b3d4ec81a75b74ce5732dba246b17441d5c883d6056a56043a931e1903552287ea4f550e144437ff0a3659f4cf766f65e
-
SSDEEP
192:XpdmujvtssXTxYVb3cp2dNqFKxJOqT85rvq2fRJIHb4YNgbBuSD1BKTEk6pyEa03:ZdvDtsfMpgNdO1fDdYAuSDybEa98T+uJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3189f5c90ee753088cb1c7dca9923598_JaffaCakes118
Files
-
3189f5c90ee753088cb1c7dca9923598_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 216KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE