Static task
static1
Behavioral task
behavioral1
Sample
03213606b154cdf27ef999b3f0be54ae_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
03213606b154cdf27ef999b3f0be54ae_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
03213606b154cdf27ef999b3f0be54ae_JaffaCakes118
-
Size
20KB
-
MD5
03213606b154cdf27ef999b3f0be54ae
-
SHA1
df28364d1ec8a9e314c0a7a29eec33692f397f82
-
SHA256
c1d526e5fb30ef81d755c3c99fe8a6fed3c0a969c52d25a1d799bd6440cf5541
-
SHA512
f469dfd766d909c32a257b75ea934c8314955cce12705f26e7709dea048c9443dc745d03a1aeb6a552fab32c9995cf94b182fd9f3c3fa0a8e0c00a0373447772
-
SSDEEP
384:IXwWtsW4cCoAkQMr7Pd5QlS8J5U3255Tiv0D1GCBTlHpfxPjK:CyoHQMnVqlVHUG55TicD1GCnHpfE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03213606b154cdf27ef999b3f0be54ae_JaffaCakes118
Files
-
03213606b154cdf27ef999b3f0be54ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE