Static task
static1
Behavioral task
behavioral1
Sample
248f17ee0a259e7c10c166dbed531b6e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
248f17ee0a259e7c10c166dbed531b6e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
248f17ee0a259e7c10c166dbed531b6e_JaffaCakes118
-
Size
472KB
-
MD5
248f17ee0a259e7c10c166dbed531b6e
-
SHA1
e10d2a086b8424087da3c085881ae60160d9cf1d
-
SHA256
d05b9ee7fbe4c774c84de9153659d3ce79f4b2e25e0674e0f8676d2e78f80345
-
SHA512
5f06676d33e66ecc90957b42febcf95ba1ccaf0bb488c5a93bf3859847a706524428063c801c4059cca9e9495ca8a57e50184acfafcfedc814e9519853b5aee5
-
SSDEEP
12288:aZUIdpwE3lJjJESckailsUqKHB5Se3IRcs:aauD3bXoiWUqen
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 248f17ee0a259e7c10c166dbed531b6e_JaffaCakes118
Files
-
248f17ee0a259e7c10c166dbed531b6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.MD5 Size: 349KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MD5 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MD5 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MD5 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MD5 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MD5 Size: 512B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE