Static task
static1
Behavioral task
behavioral1
Sample
f03ff9ee7accf348e2ebcc78f9a82b93_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f03ff9ee7accf348e2ebcc78f9a82b93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f03ff9ee7accf348e2ebcc78f9a82b93_JaffaCakes118
-
Size
70KB
-
MD5
f03ff9ee7accf348e2ebcc78f9a82b93
-
SHA1
c7c95d380950bc6459febf8fe7ef778d6c7edc39
-
SHA256
01d264e148534c31c8bed8898f8a6c5f58430b208b362e507169302fc1d8d3b0
-
SHA512
659e26b1fecb47dec1fe1f0c2c02355b17c4cf69fd6bd3c83d6fda30d1c965b63f16ce284e6db0b27b5bb038922a30f289eedca1801ed2a63f506fb8997fbfea
-
SSDEEP
1536:2i+h3/TG2mTDV7eX5vLgo8Arl3UlcW9mxsz6US17INtwm0m:s/TXiDsX5vLgonl3Ulc/p1cNtj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f03ff9ee7accf348e2ebcc78f9a82b93_JaffaCakes118
Files
-
f03ff9ee7accf348e2ebcc78f9a82b93_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Nspack Size: - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BCPack Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE