Static task
static1
Behavioral task
behavioral1
Sample
03813ac0378e577654ec5a9f4c7728e8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03813ac0378e577654ec5a9f4c7728e8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
03813ac0378e577654ec5a9f4c7728e8_JaffaCakes118
-
Size
496KB
-
MD5
03813ac0378e577654ec5a9f4c7728e8
-
SHA1
163bb8d2fb223c7f25911d9a0d943384d816da85
-
SHA256
77d2e8bb607c1e6feb0edc7aec98f9ba56015c0a0cd8a5de87b9f9f9570bccf7
-
SHA512
08ca1aa799ddf05e7b093ca2dd7afb085835392b34bb4396ffc39b5f115f2ce8ed54780fd3fb95801c447dc229340111fbe4fb3d0be06262b6d97903381e1317
-
SSDEEP
12288:Zk+vceJ2HfgG+26geCaZmS1Q+qGBJ8YlsOckq+YiA4U+hIb6fRD:lvzeg7RWagsP1AFOckqDiBFh4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03813ac0378e577654ec5a9f4c7728e8_JaffaCakes118
Files
-
03813ac0378e577654ec5a9f4c7728e8_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
A Size: 207KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
B Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
C Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
D Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
E Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
F Size: 53KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.heb Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE