Static task
static1
Behavioral task
behavioral1
Sample
d52ffbb1c62bceedf518ee272f366167_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d52ffbb1c62bceedf518ee272f366167_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d52ffbb1c62bceedf518ee272f366167_JaffaCakes118
-
Size
17KB
-
MD5
d52ffbb1c62bceedf518ee272f366167
-
SHA1
f07c9adbce642ef783ed65593e3bc61bf691b717
-
SHA256
012dff7cae301a200d7edf987e08ffe9a5049fe01344601128ed09a091e34ce0
-
SHA512
c9553ad66c6c48de2b90326694fe97dcb0cb9156533c5b34fd6a5206c718e9f63083f183629c5a0686afa4add344c9d26159eb25fcf84d5be886010f2dcd1ca2
-
SSDEEP
192:8bGOewD17LhIwmjL1rnsNiXeH5V3PEPnzcRUiejuJSW+JgZnhgs7qAi5DSjMpiPS:8bGUD1eXdsNH5V3MYSinJoJcfQ5GP8y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d52ffbb1c62bceedf518ee272f366167_JaffaCakes118
Files
-
d52ffbb1c62bceedf518ee272f366167_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 9KB - Virtual size: 9KB
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 243KB
IMAGE_SCN_MEM_WRITE
Size: 267B - Virtual size: 267B
IMAGE_SCN_MEM_WRITE
Size: 267B - Virtual size: 267B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.109 Size: 245B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.109 Size: 245B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE