Static task
static1
Behavioral task
behavioral1
Sample
0531952a7b05883c469390fe8157a68a_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0531952a7b05883c469390fe8157a68a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0531952a7b05883c469390fe8157a68a_JaffaCakes118
-
Size
7KB
-
MD5
0531952a7b05883c469390fe8157a68a
-
SHA1
77e46bdee2c38b0bbe1a37067a97b7fb7813279f
-
SHA256
7a5259407b10727d440998c565fd12be63c7f8dcde70f5f123fa0339c4a65a77
-
SHA512
5916c0c302ef87f5b6187c2506abfd418a9f05e01eeee90945785413b7cc90d4d807e361310e5cb8874140cbe94da613d33cd3364a37f60636f26d46b514cff0
-
SSDEEP
96:ystDDbBXHq20q/70atHpxKHSo537F80vtpVUAp/b9ikqdDn6ZRT:ptDBXHq4/fppxKHfV7F7cAZ9itkR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0531952a7b05883c469390fe8157a68a_JaffaCakes118
Files
-
0531952a7b05883c469390fe8157a68a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
KeyMake Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AntiKill Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE