Static task
static1
Behavioral task
behavioral1
Sample
c19b49cebd424092c4cbb0a79133eb02_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c19b49cebd424092c4cbb0a79133eb02_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c19b49cebd424092c4cbb0a79133eb02_JaffaCakes118
-
Size
123KB
-
MD5
c19b49cebd424092c4cbb0a79133eb02
-
SHA1
35d987671c9dd128a0477118529c980bf0835785
-
SHA256
51b15e1eb8959d94ab97f639cf16b80049dd14856363be7652e3f6d030dce0b3
-
SHA512
73808033d655d341cfb8c1731e37086329b6e2c81212237b790e2b6a30976292c93af0f58646b4aa1b26589766f23d7cb388eba81ac57ef4fd00fe42f87ddd3f
-
SSDEEP
3072:rMTDly88oLf5Ph+wjBne7OymC0eHx34FGBF4kodmCQ4aKiBbTb6GL:rM/F8oLfh5AzmC0eeFGBsRFLiF6m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c19b49cebd424092c4cbb0a79133eb02_JaffaCakes118
Files
-
c19b49cebd424092c4cbb0a79133eb02_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE