Static task
static1
Behavioral task
behavioral1
Sample
03682616aa9ae7917049c98d4c9c3d82_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
03682616aa9ae7917049c98d4c9c3d82_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
03682616aa9ae7917049c98d4c9c3d82_JaffaCakes118
-
Size
251KB
-
MD5
03682616aa9ae7917049c98d4c9c3d82
-
SHA1
865d1ab2191d212c4afe0605cf36599b01262c9f
-
SHA256
1c2499ffbdc0cad63c5d4034cbe8e6bbb09e9ef2a03c3bfd4cc3003f4f55843a
-
SHA512
997f913d74cb1a4bc2eca556f6ab87b31c825dd390bfc287eb04c5bccf9d858a3082b88fc7618dd2a88f94680337d709325381b6ef865ea73f81b34c2e870096
-
SSDEEP
384:nn8AZCSsOy7kgqAOurt35zb2mYjbzKJamwjkbDExpUwofVC+xibl1rNAVg48MrXB:LZywgqAOurthAbmcmVDNlc+YblBiX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03682616aa9ae7917049c98d4c9c3d82_JaffaCakes118
Files
-
03682616aa9ae7917049c98d4c9c3d82_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�y�����y Size: - Virtual size: 316KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���z[ Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE