Static task
static1
Behavioral task
behavioral1
Sample
046aba1dfe54f7b3a4f1f5397ded7753_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
046aba1dfe54f7b3a4f1f5397ded7753_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
046aba1dfe54f7b3a4f1f5397ded7753_JaffaCakes118
-
Size
176KB
-
MD5
046aba1dfe54f7b3a4f1f5397ded7753
-
SHA1
f977b86bee1432ce5c401148c3a18aa06a9b6d43
-
SHA256
c881199242b18d747f499abee776e3605779b4eb983ffc0d002089f6541d582a
-
SHA512
8c0dcb3e01413ed2db971153fd4ed064557fe6ed4c8620f8a4a15cd519128d8f202c1e083543db452589aa37171be602a1a4e95d6327e62f14dec1d492730f7e
-
SSDEEP
3072:w7Qt53L2qq0Z8k93xF26rBSPoV+gRh8BqelFW6++0vvOTYsSNwR9q5f:VLHq0Z8k92iBSPoV+gRh8celb++0vvOe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 046aba1dfe54f7b3a4f1f5397ded7753_JaffaCakes118
Files
-
046aba1dfe54f7b3a4f1f5397ded7753_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ