Static task
static1
Behavioral task
behavioral1
Sample
03b5dd50c150abbb05d0513b1a61231e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03b5dd50c150abbb05d0513b1a61231e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
03b5dd50c150abbb05d0513b1a61231e_JaffaCakes118
-
Size
50KB
-
MD5
03b5dd50c150abbb05d0513b1a61231e
-
SHA1
85d38af8a0701865a476c0765e4463e6b4222638
-
SHA256
642b8942e901586679c8e0f9666c86fd2a8b316075ca173cfa66a77603f20d3c
-
SHA512
82b0ac6dea3357f6b05d8a224585a7b487ed1ba50cf5723c68d7ab9ca6ca6b8b89c2131a7233337499c34bd8d61fe8105e0af2fee415eff67433c6c08fc49e1a
-
SSDEEP
3:WlWUqt/vllnl+YZcFTS9gXeF+X32ZpAl48amHhhs/Pl//vl7/+lpltll2JEHd1/2:idqGVg3F+X32QOJilL4LUdZSgBEJH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03b5dd50c150abbb05d0513b1a61231e_JaffaCakes118
Files
-
03b5dd50c150abbb05d0513b1a61231e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 744B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE