Static task
static1
Behavioral task
behavioral1
Sample
c0d52f5c651e7b4b7eff7294ee18e20c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0d52f5c651e7b4b7eff7294ee18e20c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0d52f5c651e7b4b7eff7294ee18e20c_JaffaCakes118
-
Size
59KB
-
MD5
c0d52f5c651e7b4b7eff7294ee18e20c
-
SHA1
6b66c148fadb5e99a4f3854b52ff52da2e98cc8f
-
SHA256
ca9bff877c9ada195d42fe60cf59f432a13a6977c368161dbcd88e7ce3be282b
-
SHA512
4ed69e51b8ceeb8c582d67ca31926df7f347d0b3807ad9d0a83f3788332bf0614679c8f050da17f1c329e00fd20ed4afde2a3f802443b351dd2e959b3e474baa
-
SSDEEP
768:LxYNwTJpAG0oMr6qYTL2kYvdelfRNLX/PjIoEbcAs8MedPdD/Y0jbU4oExo8bsPq:1YappMmPyQTNLXndEbVM+dFqE36mL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0d52f5c651e7b4b7eff7294ee18e20c_JaffaCakes118
Files
-
c0d52f5c651e7b4b7eff7294ee18e20c_JaffaCakes118.exe windows:35162 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
aayrzyqr Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
azrjrarq Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jjayziya Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iyjajybj Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ