Static task
static1
Behavioral task
behavioral1
Sample
be448bbf115c145578cc3bd515c948e1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be448bbf115c145578cc3bd515c948e1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
be448bbf115c145578cc3bd515c948e1_JaffaCakes118
-
Size
184KB
-
MD5
be448bbf115c145578cc3bd515c948e1
-
SHA1
097d5830b9b88643f6af53ccc667a5fb615b3de4
-
SHA256
63df5a555e6159ca56f83d4d76c9caabfcf667004c27c37428e3ebf3410c158e
-
SHA512
32aca3f2fd16b565edf6daba65a295223e02c48b730dd8a7669f9983bf599d0e8dd80851502f67f5275f309eb6ec772b7ec3aefa22756423c3896bb9c98fbaae
-
SSDEEP
3072:7kSMoTNXVWz01OjBd/xsY8buy6p6uK9EbDyxYHPH1NlPvyFK:7kZo/Y01idpsY8xeldNlPvyF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be448bbf115c145578cc3bd515c948e1_JaffaCakes118
Files
-
be448bbf115c145578cc3bd515c948e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ