Static task
static1
Behavioral task
behavioral1
Sample
01203a547933968a8da225f3425edfa7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
01203a547933968a8da225f3425edfa7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
01203a547933968a8da225f3425edfa7_JaffaCakes118
-
Size
94KB
-
MD5
01203a547933968a8da225f3425edfa7
-
SHA1
fc473f1932d5be6db709df3dd4ddb69f0844fa6d
-
SHA256
85667d7ca097466fd60481593629d0757c7681c90b181d818e9b4cf68fd9dc48
-
SHA512
48b6e480ebe14a0963b17989a325db9b5f04e47afea5a561cacc4f0cd9a5f4cf81a6836fddb0e9f3eef646295def0b9787bc85467574ff89dee9cc22f4f6fc87
-
SSDEEP
1536:rcPVk5/BfWGPG36y918HMQ57XXU9Yvt0/LKsmPvBTwE59n623m1FHc7/qE:sk5/BZGKy96HM0XU+aDe5UEjmI/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01203a547933968a8da225f3425edfa7_JaffaCakes118
Files
-
01203a547933968a8da225f3425edfa7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 23KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 189KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE