Static task
static1
Behavioral task
behavioral1
Sample
952a2bf569520f5ab39b64693bbf5069_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
952a2bf569520f5ab39b64693bbf5069_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
952a2bf569520f5ab39b64693bbf5069_JaffaCakes118
-
Size
152KB
-
MD5
952a2bf569520f5ab39b64693bbf5069
-
SHA1
be52a6a1fc0c1fd019e006f6b06f032355fc9139
-
SHA256
487368f8c5ff7622414e3a18f9c5666c56e755db7e57356b42ef2b645b130cb6
-
SHA512
380bb6d5a2fe9b40eb1164bac4e0ebe9bcacc1e4dfd1214422f1593353e37f9ae294d7671b1270f85903e52522801a408fd242dc4f8a8c5d75198cd6295f9d95
-
SSDEEP
3072:lVRQ68BcbXgAZ4+2Q7glYe+34ottER+60oRahMpD/gvS/StwhrfDAov9kqMAXNSA:lVW68BcrgAm+2Qf4gc+60otp7dmwtbA4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 952a2bf569520f5ab39b64693bbf5069_JaffaCakes118
Files
-
952a2bf569520f5ab39b64693bbf5069_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.pzl0f5 Size: 2KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhmb0d Size: - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nqzq9p Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.o4qflc Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.6xl1e7 Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hswnyx Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qekfij Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.b6$142 Size: - Virtual size: 83B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ivkwfq Size: 56B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 834.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 16B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 67B - Virtual size: 67B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ