Static task
static1
Behavioral task
behavioral1
Sample
003d34e6234d63478dbe162dff3b2d72_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
003d34e6234d63478dbe162dff3b2d72_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
003d34e6234d63478dbe162dff3b2d72_JaffaCakes118
-
Size
222KB
-
MD5
003d34e6234d63478dbe162dff3b2d72
-
SHA1
473e13de30ff30aff9b23654b12461572cc8174e
-
SHA256
03a7613bb3692cae53cdcd680bb8c71c2f72584fbb159dfcc4f31b5db9612e48
-
SHA512
ff8ee2d7a0a9cbd5896afe6256b6ceb504f23cb145126043c7095ebb4ea3962fdd8e22ef13392a4d6966357618088e031fd2b0bdf9854fe9e31807a43a9f9103
-
SSDEEP
6144:WmN1CmwWfioQqby0ZWG/ukx0ziOp4QDQXUIgKeb2aQhGVlHS:d1CmwWfN9byr0Rx0ms4Q8XUIxa2akp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 003d34e6234d63478dbe162dff3b2d72_JaffaCakes118
Files
-
003d34e6234d63478dbe162dff3b2d72_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UCU0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UCU1 Size: 217KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE