Static task
static1
Behavioral task
behavioral1
Sample
003a55665b920a4f2302a1f62f014e74_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
003a55665b920a4f2302a1f62f014e74_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
003a55665b920a4f2302a1f62f014e74_JaffaCakes118
-
Size
205KB
-
MD5
003a55665b920a4f2302a1f62f014e74
-
SHA1
f3244a5116e5efa281a09173b198982334e501b2
-
SHA256
3e858b2cd0b757d1e4094a0664a4d711afecb882a77af5c32e2e868c499e60fd
-
SHA512
06297ae08ae1c803933a75b911cf52d262a600415cd1fe2c2bb64e8ebde4e3f93d8dfa242ced2532efdd374b58a3a1980a80227571837e6d4343f26e1e49ade2
-
SSDEEP
3072:xhWXsDLkJH45KggMaqkpNRywgCuGljljh1PDRBZW1wXM97+rD0aSLw0T8G4Wq:7IKkJH4VaqkawgZGl5Lb/IwXnFS8i0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 003a55665b920a4f2302a1f62f014e74_JaffaCakes118
Files
-
003a55665b920a4f2302a1f62f014e74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 169KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ