Static task
static1
Behavioral task
behavioral1
Sample
f53521fe39e00fcc52e4b2ab8ab6d351_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f53521fe39e00fcc52e4b2ab8ab6d351_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f53521fe39e00fcc52e4b2ab8ab6d351_JaffaCakes118
-
Size
1.2MB
-
MD5
f53521fe39e00fcc52e4b2ab8ab6d351
-
SHA1
ae3f15889741ac5f5aa92ac30afd88c1d9fc4f8c
-
SHA256
c03bfd51439bf96a2bd04df96ae757ede84af06152158bb5e949f2efc7453064
-
SHA512
7b68c593108630200bdf5eaadfe10de7651a52497ebe9d611653ca09fe10dfc544aaeafb0c3b2677f0cb8f57985f914e6a8aaac32507494a8e067a7646c41294
-
SSDEEP
24576:yDovNZW5Ap+YzASMFrnUGCCSg8vRMTr9XOXDGKTcfhyZW5Iwayz70:yuwFlFVTr9X4rTrwVI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f53521fe39e00fcc52e4b2ab8ab6d351_JaffaCakes118
Files
-
f53521fe39e00fcc52e4b2ab8ab6d351_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: 860KB - Virtual size: 860KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 384KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE