Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_19787f3a4c80689f750b4538c090b679.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_19787f3a4c80689f750b4538c090b679.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_19787f3a4c80689f750b4538c090b679
-
Size
146KB
-
MD5
19787f3a4c80689f750b4538c090b679
-
SHA1
0151e05a93dd4342575060b067350a05149ae7a6
-
SHA256
aecb2ddb8f4263ee7f7be40aa7eb3c1f3553a97c57fef595bf88b05bbd798533
-
SHA512
be20cbeaef5252b480e1b8de6fd4767fc9b671782ba0341e093840770e7bc0c1a417e22aa3fde139432000780683b7ccd023bc5c50c16351b48e42739c024680
-
SSDEEP
3072:LvaDb3CwdRvCwCcGZZ+dq4lUDtmEV9pTSf1dGmkP7Us43vErW7I5YhP:LiDbTjhG7+dq4lUDtv7pTC1n9vsWki9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_19787f3a4c80689f750b4538c090b679
Files
-
JaffaCakes118_19787f3a4c80689f750b4538c090b679.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE