Static task
static1
Behavioral task
behavioral1
Sample
252264e02611e4e2eddc37ab4c9e2465_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
252264e02611e4e2eddc37ab4c9e2465_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
252264e02611e4e2eddc37ab4c9e2465_JaffaCakes118
-
Size
226KB
-
MD5
252264e02611e4e2eddc37ab4c9e2465
-
SHA1
458d4e7cec0cb3de66d23b61029ee6dd01e27196
-
SHA256
57ac0019ae3a8c08f42f4184a2807dc07c97b0edb63a438ace25cf41b607e99c
-
SHA512
149dd0a733de12b223cfebf895d5c2636a33148ed27a7d5044b358a9e4eb7f2ca698104d36a0c80fe2b5c93c0b4288e4449bc92f4906018656f190a0c17be8fe
-
SSDEEP
6144:1Ycy1S7Qt25lOMfOp3aK+84GYCFB3Jh2lBSnEXW/:1Yc0AQqvm858NsBSEXW/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 252264e02611e4e2eddc37ab4c9e2465_JaffaCakes118
Files
-
252264e02611e4e2eddc37ab4c9e2465_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.code Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 221KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ