Static task
static1
Behavioral task
behavioral1
Sample
c51001b2f8f16fe692c33e50f139cf95_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c51001b2f8f16fe692c33e50f139cf95_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
c51001b2f8f16fe692c33e50f139cf95_JaffaCakes118
-
Size
192KB
-
MD5
c51001b2f8f16fe692c33e50f139cf95
-
SHA1
25aab61359aaa32833c1c80d85236fc7e621840d
-
SHA256
2d513f67e04dd43871b2cfc7b2603531c052f25d81e9481466bc8a51574ae600
-
SHA512
b7d45b475b095088ccfec2caa3af332571e8cb28e8ae8afcb32e8d0d6e77c567c7b128a15e61504569c4f9e44d3936bb513ba00d937291ed845e419e25f4e611
-
SSDEEP
3072:yck7oJGykywQCOj98dEWUJkLfhUkMyef2KYJxE5m5lHtpFD:yc4oe3QCC86WUJFY0qd5lHtpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c51001b2f8f16fe692c33e50f139cf95_JaffaCakes118
Files
-
c51001b2f8f16fe692c33e50f139cf95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ