Static task
static1
Behavioral task
behavioral1
Sample
403b14ff0f8b0ad0bcf9af3fed6808d1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
403b14ff0f8b0ad0bcf9af3fed6808d1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
403b14ff0f8b0ad0bcf9af3fed6808d1_JaffaCakes118
-
Size
125KB
-
MD5
403b14ff0f8b0ad0bcf9af3fed6808d1
-
SHA1
ec0e37fe3c35640bc3c4ee8aaf6d24fc1ed14898
-
SHA256
d31c4c7ae740156ef110e093909f8dc054ac1b01b3da27c2395be2aeacdd2fbb
-
SHA512
e8dc94b9ea7db418c1efd4fe79deacb5ea6bdfa96ccb4ddd8b57e412e15ef092a4891cc919ec6c9bb77661cd27325bc543ded3627477da663e0b4b615f1832d8
-
SSDEEP
3072:H9w+1eyaPVtlc/HFyVMbiqdrYA2hJYrrsJK:t1exN/mF2Mb3d12hOnX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 403b14ff0f8b0ad0bcf9af3fed6808d1_JaffaCakes118
Files
-
403b14ff0f8b0ad0bcf9af3fed6808d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
H��$[x Size: - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u;���� Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE