Static task
static1
Behavioral task
behavioral1
Sample
03a9905ddcff19cbd8f8345d73487f85_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
03a9905ddcff19cbd8f8345d73487f85_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
03a9905ddcff19cbd8f8345d73487f85_JaffaCakes118
-
Size
27KB
-
MD5
03a9905ddcff19cbd8f8345d73487f85
-
SHA1
153097dc0c9e8564de8270032c8cb36ec9590380
-
SHA256
ba93f37c95b9fca474260287104fdbb956f2862d5615ec195e31a922ae6767ec
-
SHA512
c2c0effed91d30096eb0781ec7f24019feec28542f029b1a50758513dde6480be0bba43fb972f60419d48e4c14f9abc8e5e6b1b53f38ed081e731e7b9a07bc4c
-
SSDEEP
384:t9SmAkbQdOkP8EU9vk8iCzpIQxQRrf8SiSwgzuFp0qizxrNPrZxk8Bt:2mAGkENi5QxQRf8S7bI0P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03a9905ddcff19cbd8f8345d73487f85_JaffaCakes118
Files
-
03a9905ddcff19cbd8f8345d73487f85_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE