Static task
static1
Behavioral task
behavioral1
Sample
1a03ff91a464563948efea2e5792d46e_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1a03ff91a464563948efea2e5792d46e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1a03ff91a464563948efea2e5792d46e_JaffaCakes118
-
Size
400KB
-
MD5
1a03ff91a464563948efea2e5792d46e
-
SHA1
9781e56be4fbebd3dd50343081d7b4d6804cc5ba
-
SHA256
625c9238380ffd326eb5d5325e013ba9dd84b7ebf1cce8ad394ae6a2ba83143c
-
SHA512
8df953c4a6cc5e66744db1129a69c68e1c4e9ae0aa61a1337a1cf13b1f11040271bedac49a756eb7e04b90f3b31e9823b0b036ec305ce87979782bf798a45683
-
SSDEEP
6144:KFzzGZm6sA11rbDu9dT6Rqiqj6O8I8wO3caS4Km3DS8J7wABomlntX362GWAZC0X:KFeZmeXbiLT6Rqi8G/sxQSA6uDvAZ3X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a03ff91a464563948efea2e5792d46e_JaffaCakes118
Files
-
1a03ff91a464563948efea2e5792d46e_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 391KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 1023B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE