Static task
static1
Behavioral task
behavioral1
Sample
f557652d94cc2104c7578b90d45777c5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f557652d94cc2104c7578b90d45777c5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f557652d94cc2104c7578b90d45777c5_JaffaCakes118
-
Size
63KB
-
MD5
f557652d94cc2104c7578b90d45777c5
-
SHA1
3f6c8c61564a6d7f31998b45dfeb9aeb4669e067
-
SHA256
d52bdb43a3e2f3b173f4f573ded8ead57985a1879422f825e863489d4f4d2999
-
SHA512
5595d17964ccc16258fa29284dd378dc8f59c7f25a9e3e78e85d0d7825ae070569aebebd504c12cdf93ef97c783fb515d9066b77f2a6d0da93e8780b23f45be7
-
SSDEEP
768:CrhSLB9O8t958dcJ29UFdOCW4SImmdaC4xbqHOHpK/umMMBeWcTNtTQYsVr7Irpm:KgOOjfQ4SIWCCb/HY/umMM45Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f557652d94cc2104c7578b90d45777c5_JaffaCakes118
Files
-
f557652d94cc2104c7578b90d45777c5_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
CODE32 Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CONST32 Size: 10KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ