Static task
static1
Behavioral task
behavioral1
Sample
13cfce19a9761fe7c320923a0ea36f1f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13cfce19a9761fe7c320923a0ea36f1f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
13cfce19a9761fe7c320923a0ea36f1f_JaffaCakes118
-
Size
186KB
-
MD5
13cfce19a9761fe7c320923a0ea36f1f
-
SHA1
e19507415c0febbad6e4ddf2f3e3a2c3dc1251e2
-
SHA256
c9f9ebb9c3b59436cd2621692516848186b7dad967e4d423b82e6d2f0f17070b
-
SHA512
880ea7016442c949e211b4684d23229597aea7d3008ea9488d44d0ededbe1b951c143c2c36e7cfa1878bf6a3ed5d2a79ace67047a82a91bb264b9b88a9890a42
-
SSDEEP
3072:pssk0MQeGVu3T/D6StAqnm593S+nUWXl54xbmjZ3SMBiSLeP5v8cOPZb:p7BMNGaLXGymKNk8x0Z3AieWcO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13cfce19a9761fe7c320923a0ea36f1f_JaffaCakes118
Files
-
13cfce19a9761fe7c320923a0ea36f1f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 23KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE