Static task
static1
Behavioral task
behavioral1
Sample
253b5268c27862d1d39621c6c34e3e1d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
253b5268c27862d1d39621c6c34e3e1d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
253b5268c27862d1d39621c6c34e3e1d_JaffaCakes118
-
Size
752KB
-
MD5
253b5268c27862d1d39621c6c34e3e1d
-
SHA1
c702cf742062cac5ba10862ced3a9acc14158c27
-
SHA256
d9bd995cd3c1889c50213710e8a839e5470cbdad253679bea089f7792f41da1f
-
SHA512
87771b329a6a89e206bbd13412ecc2ad43f3976927b5dc3f5d1a317818b0eeebc405ad517edb10efa266c1710190fe9e12cf7b1bf08270732d92ec6dc82cda6d
-
SSDEEP
12288:rnI49bgWs0tpRsbQ5XTgD5lgZgpbGJjSRpWcNov0tpRsbQ5Q:7s0tpRsbQ5Q5q4Wr0tpRsbQ5Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 253b5268c27862d1d39621c6c34e3e1d_JaffaCakes118
Files
-
253b5268c27862d1d39621c6c34e3e1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 644KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ