Static task
static1
Behavioral task
behavioral1
Sample
03182ef8702001c40b01c9d3e82478a9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03182ef8702001c40b01c9d3e82478a9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
03182ef8702001c40b01c9d3e82478a9_JaffaCakes118
-
Size
86KB
-
MD5
03182ef8702001c40b01c9d3e82478a9
-
SHA1
03147d032cedf45318b02d5aad75c974c5e81d86
-
SHA256
0ec6144d4a3f0f4a756dd3e4676e71e374af68692ebcaff34679f81ec342357f
-
SHA512
0ea7255e08f0598e4fe4369d54e9580bfe1f0aea4962ee83c456a9be4d4aa922790dd30534c77ff100038bc9b7cd7b8f5962792ddb993b310118082823d6df1f
-
SSDEEP
1536:Ilhx192COltO5KPjMcvBO6E60FReALWFUg5Pu3Q3u+YsHBdK7zVK0Xnouy8dp:ihxxOe5YjMcoA0WALWSg5Wg3uUdyoutb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03182ef8702001c40b01c9d3e82478a9_JaffaCakes118
Files
-
03182ef8702001c40b01c9d3e82478a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
data Size: - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE