Static task
static1
Behavioral task
behavioral1
Sample
031e263d8e6c5056a36c511fcd11a91b_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
031e263d8e6c5056a36c511fcd11a91b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
031e263d8e6c5056a36c511fcd11a91b_JaffaCakes118
-
Size
291KB
-
MD5
031e263d8e6c5056a36c511fcd11a91b
-
SHA1
f552b8ecd5481f8ef9b50e486af230abdafd498a
-
SHA256
cb2edac59049073acdbfd0bf29f3989112048ff83a32a01a82fff23c2d2f82d3
-
SHA512
b33cfc5d8800b6f9a5cf5e05070e4f21cd3a6f3d5f7fadee7bc18f0e95c2d76a5b116bea430507a9ea1d68747c5968028db0fa4d27698c9c4cdbf715a2dc9f89
-
SSDEEP
6144:ez4Sah3ILE9xWW4x6sC4vvqctCwfJMl6UuGeTqe/KphOE/h1l4iUb9:ez4BVP9V4XTXqYCeTIekj/hc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 031e263d8e6c5056a36c511fcd11a91b_JaffaCakes118
Files
-
031e263d8e6c5056a36c511fcd11a91b_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�nsp1 Size: 283KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�nsp2 Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�i7ke Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 244B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE