Static task
static1
Behavioral task
behavioral1
Sample
603bf60f5ca9bfe5027c3cc48075075c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
603bf60f5ca9bfe5027c3cc48075075c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
603bf60f5ca9bfe5027c3cc48075075c_JaffaCakes118
-
Size
25KB
-
MD5
603bf60f5ca9bfe5027c3cc48075075c
-
SHA1
9e261b9306f7d6f5c685178ab5684d954305eb75
-
SHA256
e5340e881c448c31d13fd540fa0e2513a0ce4edd385251ec57facc1338d40ec7
-
SHA512
19d7f57cc4f620dfcd3b8011a32cefc78be32f68e1ca2ac8868a9fc7a84ee3ec15075cc5dcd60744d78f34613fa2ff33ea1d60ef4f6800b1e556382e0cf84ca6
-
SSDEEP
384:V7rM1fEGndhZGgLyw5AQWO2khubfzWvljvIBPYLjv2GKD31KDZWOf:m5nd3GgL/5d2kKfzSIBw3vkMh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 603bf60f5ca9bfe5027c3cc48075075c_JaffaCakes118
Files
-
603bf60f5ca9bfe5027c3cc48075075c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 16KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 947B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE