Static task
static1
Behavioral task
behavioral1
Sample
03143afe614ec357f1cfe36022fc9acb_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
03143afe614ec357f1cfe36022fc9acb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
03143afe614ec357f1cfe36022fc9acb_JaffaCakes118
-
Size
18KB
-
MD5
03143afe614ec357f1cfe36022fc9acb
-
SHA1
c11490f5059eb95042bd7e148f7851f6892c3680
-
SHA256
ac98d1844da2579ff29c3ae8eb2d0229142a488d83ef8bd20d98dc0b06f21e04
-
SHA512
f922a09087f44e5c7b69bf0bfeda6cf0bddc9f9f966e7f5c0f1465c58a0455b332dddc24a13a58394af3735c08298b84c0289464bb5dd4396e047621ff261373
-
SSDEEP
384:7thAcecbhejl4AQF9jJ+O7LdwyC3/zvtoXqJt8rXKFVoZDqVH71:7oNcbG4AQFtJ+2RwyC3zirXqCZ+T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03143afe614ec357f1cfe36022fc9acb_JaffaCakes118
Files
-
03143afe614ec357f1cfe36022fc9acb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE