Static task
static1
Behavioral task
behavioral1
Sample
0603e8fa55429d38d1c1721bb081daed_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0603e8fa55429d38d1c1721bb081daed_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0603e8fa55429d38d1c1721bb081daed_JaffaCakes118
-
Size
18KB
-
MD5
0603e8fa55429d38d1c1721bb081daed
-
SHA1
b1d7b017c886570948df3175a962a59718b2bb12
-
SHA256
0f1a8b1fb7a796bd616be076d113169ec10814fad3fa26b549d1bc0847e48562
-
SHA512
86066af9a00850036266279b0a60c0ec43b5bd0ded0fea30e9075b1bffa90d3f35b55d65f8393c2c173663938b6aebb73af9172c55378235477fade4e0d5ac1e
-
SSDEEP
384:OfmEd9CafO5enutNC2VAjII9C/tHq8D1tZtctZt7tst7tjA+0k:Ymh5enYNClc/ZqWtZtctZt7tst7t0Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0603e8fa55429d38d1c1721bb081daed_JaffaCakes118
Files
-
0603e8fa55429d38d1c1721bb081daed_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e58d0c080fff3efd1b29d3331696cd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
Sections
�p��~� Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
��39>� Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
��)vӊ^� Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ