Static task
static1
Behavioral task
behavioral1
Sample
03e6edc8416dea4374a0d4397d89a8ea_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03e6edc8416dea4374a0d4397d89a8ea_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
03e6edc8416dea4374a0d4397d89a8ea_JaffaCakes118
-
Size
128KB
-
MD5
03e6edc8416dea4374a0d4397d89a8ea
-
SHA1
1b609af679c46eee6dc222bd837fb3f1f0833210
-
SHA256
85bfbfc4b65e229ef65b53d4ef715ea8f34110c24308b07831c5c0ce764a591c
-
SHA512
e29987d0604a3856faf7d1732af39638168e4d5bfb2abcf5c686d74fba5b25447a2526dec7b94c418a35232c1f39c9af176996631f2eced2e0289974bd9338bd
-
SSDEEP
3072:Ss6icoMmzTJ1hZdqdYng1Ove/7RdPgnYVm4p:76/oHzZdqdAOOs7bUt4p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03e6edc8416dea4374a0d4397d89a8ea_JaffaCakes118
Files
-
03e6edc8416dea4374a0d4397d89a8ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE