Static task
static1
Behavioral task
behavioral1
Sample
251a318c24f65e25634317093c837bc7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
251a318c24f65e25634317093c837bc7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
251a318c24f65e25634317093c837bc7_JaffaCakes118
-
Size
5KB
-
MD5
251a318c24f65e25634317093c837bc7
-
SHA1
92a536234ef4dd9c60e21649bc9a27bed5e2fe87
-
SHA256
7e02d95897217d1d6724431bb5e33ee1879296e7237232c171bf91f6e37cb1f4
-
SHA512
4213b671e04798592d445266fb21a4aacf650b86abdc41106ac203a3fd0495972d689138da920b098bb9e48db746ae081df1498e73ebf48df3a4c51da26d7672
-
SSDEEP
48:OEPcwSsmc23f9IhDfhOw8QOq9BE4HHfQKNhYW4QSxJtydlAcSeJY8JTaE1By9SpN:nPcBcAfmtnD9BEcHHXYTQ04bD+RB4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 251a318c24f65e25634317093c837bc7_JaffaCakes118
Files
-
251a318c24f65e25634317093c837bc7_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
BLiZZARD Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BLiZZARD Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE