Static task
static1
Behavioral task
behavioral1
Sample
b03e560065ab6214f693cbeefb7eebb2_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
b03e560065ab6214f693cbeefb7eebb2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
b03e560065ab6214f693cbeefb7eebb2_JaffaCakes118
-
Size
571KB
-
MD5
b03e560065ab6214f693cbeefb7eebb2
-
SHA1
8217549dcaa794db6120f40a97a40ce0e8402fd9
-
SHA256
d318be6ac749bfb58f0108cda57fb3bf766ae71cdb449df01de58e4304c25ffc
-
SHA512
ad033157ccb06601066f16c394efd381ac0e3b55d0e70e112c855c712dbdd77e92f3d3a6e24d1e74c3a5051e2e39fe126277733edd7c724d31e3f60aef851d14
-
SSDEEP
12288:leAdV0FMRfmRSktcuvDHi7E7DZOidezNrKmVF9sBsea7JwHs66edZib:0GV0FwA7rzZR45rDVLsBDa1feib
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b03e560065ab6214f693cbeefb7eebb2_JaffaCakes118
Files
-
b03e560065ab6214f693cbeefb7eebb2_JaffaCakes118.exe windows:4 windows x86 arch:x86
194b4c1beb28aad856d7b54717241d80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDateFormatA
Sections
Size: 36KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yjzlhttf Size: 518KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hxhkbecr Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE