Static task
static1
Behavioral task
behavioral1
Sample
048067880be7aea1f631ec2d1403edee_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
048067880be7aea1f631ec2d1403edee_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
048067880be7aea1f631ec2d1403edee_JaffaCakes118
-
Size
430KB
-
MD5
048067880be7aea1f631ec2d1403edee
-
SHA1
51be9c48f628287459b7558c520676bcfac3fa4f
-
SHA256
023efbfff7d0077d0bc927d19c39cc3ed095f87eee874c4bf23f8a532703bdaf
-
SHA512
d30b38e2cf05605d3eaa6bbabab9ef3953bd33b0da021754954e2db37e6182f046a005cf9b3f09654e800f3108506b6c0987561d1da024d8af98f82249682a53
-
SSDEEP
6144:ADuzIgd4LGh+jvsP3zviCjXr+T3MejMhzVjCW+GoTIDG4PnB3TIRVPNgB:AWMG/PjicXDejClCW5S4PB3TotNgB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 048067880be7aea1f631ec2d1403edee_JaffaCakes118
Files
-
048067880be7aea1f631ec2d1403edee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 69KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 356KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE