Static task
static1
Behavioral task
behavioral1
Sample
652e880a0e91e3fdcb207d5c4fd5049e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
652e880a0e91e3fdcb207d5c4fd5049e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
652e880a0e91e3fdcb207d5c4fd5049e_JaffaCakes118
-
Size
108KB
-
MD5
652e880a0e91e3fdcb207d5c4fd5049e
-
SHA1
24bc2ec524fb23fb1df76c743b07bab4117f5130
-
SHA256
a0112572ea4c411ec0474b2be6b9b46ae2ff7dc2206f8ab3f530eafe1df6ca5e
-
SHA512
621b863a4c0a102875535bb17a0077bc374f643bd6e7581d2b48b8b5848e97f4c90c4b053abbdf5f7349d3846f7a5b5e14bd0a8f0d03909db14d94726896d204
-
SSDEEP
1536:/NUHgrYOzUP6KHom0jOhH5+S+BiW5SGWS1snhsomvEnHe1d33WDIoM:/iH4nzrKH7Hhp+BiwSGi0EnenWPM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 652e880a0e91e3fdcb207d5c4fd5049e_JaffaCakes118
Files
-
652e880a0e91e3fdcb207d5c4fd5049e_JaffaCakes118.exe windows:17 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ