Static task
static1
Behavioral task
behavioral1
Sample
03525f50241efc272b0cf5010af01bfb_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
03525f50241efc272b0cf5010af01bfb_JaffaCakes118
-
Size
70KB
-
MD5
03525f50241efc272b0cf5010af01bfb
-
SHA1
f883ba3255eafa42698e32465d41e2e6ebe08231
-
SHA256
939ce21ba3f891aef02ab171e10a981053a2190fcbcb1fb204a137ee3693accc
-
SHA512
d662d4de70d7859c8ac3b0df820967d7b28e6ce329988c75e4819446c5526b440d297dec76c260b329c5154990da438d19b85bc5f443a3cc23fe71063587a7c0
-
SSDEEP
1536:fi4Ez8RCIy4qgI5vcUzfDYEHKnWSkSbxUWRnzMAwSgOTzH:K4hCIBXVUHHmWSD+WmAwDOP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03525f50241efc272b0cf5010af01bfb_JaffaCakes118
Files
-
03525f50241efc272b0cf5010af01bfb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 68KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.server Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE