Static task
static1
Behavioral task
behavioral1
Sample
d190f081f7a1ebbee9c93353adb232d6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d190f081f7a1ebbee9c93353adb232d6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d190f081f7a1ebbee9c93353adb232d6_JaffaCakes118
-
Size
32KB
-
MD5
d190f081f7a1ebbee9c93353adb232d6
-
SHA1
15530d08696dad41966632f513669b986b746f94
-
SHA256
285ce14ed9025a2d5079ae14791e6643229474914212fd023253371bc0e5d83b
-
SHA512
b092887d98bd74bc1400373509e0c0b54393979b734543d099d834c55e2b9114b6f2a8e372b1d41dbe270a2618f87591ea46d15800de7d2e56f36290fe041b00
-
SSDEEP
768:nKs/bg1Q7RCN/VgW9FylxOgPTegZ279uq:nK4aN/SUkfTegZM9uq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d190f081f7a1ebbee9c93353adb232d6_JaffaCakes118
Files
-
d190f081f7a1ebbee9c93353adb232d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE