Static task
static1
Behavioral task
behavioral1
Sample
9603bfba0ea7cbd2ab1c14fd8a1f687b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9603bfba0ea7cbd2ab1c14fd8a1f687b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9603bfba0ea7cbd2ab1c14fd8a1f687b_JaffaCakes118
-
Size
173KB
-
MD5
9603bfba0ea7cbd2ab1c14fd8a1f687b
-
SHA1
7cd09bb431a06ad9c76c1f5d9d62ac5720af96bf
-
SHA256
4fce0219c4cb92598bbfece8f7a0c7f541c22004447f6f87f1081925e586dec0
-
SHA512
e3d8ecd91f6c4a0e8b7e3e0836210e9f920e870af06611052f73c0135af595eda7c445b4532b12405aa6c75c01cbfa0723165e2f0c7341247a92929a0b2a9de8
-
SSDEEP
3072:1jSRSrqqmHJI9yetCow0eIOIo9ALtc3CfHHMcHm/7DT+6LTKxz:1jjmqmHSdrw0hOIo2tc3AH/Hm/zNTQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9603bfba0ea7cbd2ab1c14fd8a1f687b_JaffaCakes118
Files
-
9603bfba0ea7cbd2ab1c14fd8a1f687b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE