Static task
static1
Behavioral task
behavioral1
Sample
185a5d89191b7a7ce16c0affa1431e6d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
185a5d89191b7a7ce16c0affa1431e6d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
185a5d89191b7a7ce16c0affa1431e6d_JaffaCakes118
-
Size
142KB
-
MD5
185a5d89191b7a7ce16c0affa1431e6d
-
SHA1
aec990245637cffef1440f655fbbf7fce9966dc5
-
SHA256
77ca3ec72e3d2d3f4958a6b520f4d9a056b49fe42efbb523f72757d58969ffd0
-
SHA512
0d64cc404d6f01cc2df50a5d94b913d96bc6d4b0aa67a8e5f8b6cc5460e473dce2770ea6cb0cfdf842cf2f9ff3c7725f65ba5e908af827e317bdb2e8ffe96805
-
SSDEEP
3072:UHVZhtOvZVLTs5Xn3Fv/CcP2w/IoEKH53HE2gJ:ytOxV4ntcw/LH53HE2U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 185a5d89191b7a7ce16c0affa1431e6d_JaffaCakes118
Files
-
185a5d89191b7a7ce16c0affa1431e6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 896B - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE