Static task
static1
Behavioral task
behavioral1
Sample
392a131b6e7b7beec3c3c6f59e94c2a9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
392a131b6e7b7beec3c3c6f59e94c2a9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
392a131b6e7b7beec3c3c6f59e94c2a9_JaffaCakes118
-
Size
193KB
-
MD5
392a131b6e7b7beec3c3c6f59e94c2a9
-
SHA1
ac6e675f9cb7a16a7c4a3b65d9adf7e4854df287
-
SHA256
498117a31382c4b60d21e751cc769a9dd7d57d6a7395c7ecb4941df2c483e070
-
SHA512
d39e277220306ca659a56045a95314352f51056ab082e424893dc22db6028286e87894ff912d6d6ca87bf91f1780ac28659d86584875e4b404be8dbb73666a2f
-
SSDEEP
3072:wQTXokMLeC96QtvUJ37aJNamf2uVKs6A5UpARrIwZGC0aFFYv7VNxjH:PzorLeact7m+QzIwAC2v71
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 392a131b6e7b7beec3c3c6f59e94c2a9_JaffaCakes118
Files
-
392a131b6e7b7beec3c3c6f59e94c2a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE