Static task
static1
Behavioral task
behavioral1
Sample
03a49e30e56ae03f34e7499a4b00afe4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
03a49e30e56ae03f34e7499a4b00afe4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
03a49e30e56ae03f34e7499a4b00afe4_JaffaCakes118
-
Size
41KB
-
MD5
03a49e30e56ae03f34e7499a4b00afe4
-
SHA1
2a3ae9bd44ec97018d18b5ee59abd184b7f6f5db
-
SHA256
4e25e14e10770d2c3eaf9fb343ed8623b6c7ad1392a3ee6b0301a21a36ff40bc
-
SHA512
d688271f70ad19f844883d1730cae601307fbaefb1392af41b3465f8cf9e70c7e53295ca2b0908a07f329aa0140e4e6edd0de06a713d45be60f32a3283b7abc9
-
SSDEEP
768:+CsddNNlyhJbrmBIxvg0KCeuPgWDrESojYWIcTkFaQSQd5JxWha5:GyfbrsIxo0OWg2rESo6OQre
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03a49e30e56ae03f34e7499a4b00afe4_JaffaCakes118
Files
-
03a49e30e56ae03f34e7499a4b00afe4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
123456 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE