Static task
static1
Behavioral task
behavioral1
Sample
032448ca1c29717aaf0de62e0099087e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
032448ca1c29717aaf0de62e0099087e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
032448ca1c29717aaf0de62e0099087e_JaffaCakes118
-
Size
23KB
-
MD5
032448ca1c29717aaf0de62e0099087e
-
SHA1
3cf82d9a9be1e37890d12b00c4c067c547d48ddc
-
SHA256
900b401b2b12a69b25552e8311b950889ce3f8fb981e77171f49748c43990353
-
SHA512
50ded3e6ee6d807bbd4e4b1914842e4d87c13ef0eba55966c8e68df6f4a8ef941cbfed6eb3127ce1370c6d612dc1e0e8d0cce0f6ab338c9864fda93b95cf0d5f
-
SSDEEP
384:WOQgsyBurkLLez22f5HC+jnAmFVnMMYPFxOkAz9jM3vetXmDFIt4mYCXoYUa9ikG:dQW4rSU22xNP8vOK17CR0ku4Ix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 032448ca1c29717aaf0de62e0099087e_JaffaCakes118
Files
-
032448ca1c29717aaf0de62e0099087e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 512B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 22KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE