Static task
static1
Behavioral task
behavioral1
Sample
03fbf56f211ba5f002b2066a108df3d1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03fbf56f211ba5f002b2066a108df3d1_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
03fbf56f211ba5f002b2066a108df3d1_JaffaCakes118
-
Size
2.2MB
-
MD5
03fbf56f211ba5f002b2066a108df3d1
-
SHA1
60f36a09349f8595feef5b685681520453e92f9e
-
SHA256
c02dcc9e5ce839cbab2655d6b0c9bb724c3ecc706293a4331a201f091c9b24a7
-
SHA512
940bf2e94e64ec0e7a77017597f7c126f60a0c4f31d4a33e8bbd752115f644868424175293168a9315c7897ba66ccbe694c28b3073aeb8542cf5c7cf713c980d
-
SSDEEP
49152:5a1GKnZHRJ47gSqh8Pf/UjdGALm5UTyhF1Q5Pk:U1GGHR2g3hgfGDxyhFSJk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03fbf56f211ba5f002b2066a108df3d1_JaffaCakes118
Files
-
03fbf56f211ba5f002b2066a108df3d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ