Static task
static1
Behavioral task
behavioral1
Sample
054156be032cffb53cc55b8059fe77ab_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
054156be032cffb53cc55b8059fe77ab_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
054156be032cffb53cc55b8059fe77ab_JaffaCakes118
-
Size
14KB
-
MD5
054156be032cffb53cc55b8059fe77ab
-
SHA1
d81d1ee051b77fd3315a4c8923ed14957b9a6d7b
-
SHA256
c53ffedd95c99e006465c3dbb1f6249b6f5c768ea123e2c81b3e66cc43e59eba
-
SHA512
f746c9ef61adf384f68d9c1299a58c99cccef511a03da2a9d7da444ada42c419eae36cf158e3ced80f7863c303bff61da8014ac1d53d095532c72b68cd193301
-
SSDEEP
192:VtmVW3l0vdV+5ndteNWWtxKp/LW0fZvBWeeNGUesRUkAsQNuNOQvI7CCPB7LSGal:Vt2vDM7eNWWtID9ZoeeNGGJNjy1u/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 054156be032cffb53cc55b8059fe77ab_JaffaCakes118
Files
-
054156be032cffb53cc55b8059fe77ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.China0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.China1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.China2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE