Static task
static1
Behavioral task
behavioral1
Sample
0b52626e79006c864eb090012db94d26_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0b52626e79006c864eb090012db94d26_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b52626e79006c864eb090012db94d26_JaffaCakes118
-
Size
164KB
-
MD5
0b52626e79006c864eb090012db94d26
-
SHA1
5590e88be51783d819b749e0c93bcf2b1a71b53f
-
SHA256
1f3e49314c1d8c4d55f062c286d6c466baa9ea0debb322255b42540871acfc43
-
SHA512
7201e93c194a993589c3e64f514e463387d162bd50a6fcc081c9665032d864790fea0a5801db4b3b7375cc2e1b4b4cb1817e48a12177d2360d9e151eb9155694
-
SSDEEP
3072:Ad55ioZaBG2uKbYE6d0QBz1hun1MaAqEhetrcLC9wmypzhFibm:AoaSr/40QZ1cn1MaAZeBGlr0y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b52626e79006c864eb090012db94d26_JaffaCakes118
Files
-
0b52626e79006c864eb090012db94d26_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Lexu Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
auonuww Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE