Static task
static1
Behavioral task
behavioral1
Sample
50b84d490e3fe0a8015583a6c68e3c6e_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
50b84d490e3fe0a8015583a6c68e3c6e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
50b84d490e3fe0a8015583a6c68e3c6e_JaffaCakes118
-
Size
32KB
-
MD5
50b84d490e3fe0a8015583a6c68e3c6e
-
SHA1
e918ccc37651b1b59af9e3660533e81cbb8f5c40
-
SHA256
b58785a1e42a7a7f75b3727a7ca14fbf0fa78f9e8cc1e776b340bbfc12bc060d
-
SHA512
92dcf2322fed34e0aa706673f39ece36196c520d3bb75d781654ce617c3a42e59e56e55af43efd1fae2eec0c4d69bef1dcff0bd77c0bcc805d40d89f27068de3
-
SSDEEP
384:kLq2p6HHIcTIcc2HAKdMNt31xfvWpDd4PoWAbS:t2prOIHRNt31xfvWJyPCm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50b84d490e3fe0a8015583a6c68e3c6e_JaffaCakes118
Files
-
50b84d490e3fe0a8015583a6c68e3c6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ