Static task
static1
Behavioral task
behavioral1
Sample
452eeb31f62266879cea22a9f04664d7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
452eeb31f62266879cea22a9f04664d7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
452eeb31f62266879cea22a9f04664d7_JaffaCakes118
-
Size
433KB
-
MD5
452eeb31f62266879cea22a9f04664d7
-
SHA1
2143a14ed5bc67259a99f7cc7e45b44c06982488
-
SHA256
d7d9506f010685d9e3bf673ea5b443a3fa37fe34c6011d69cebd683bba1ef9e4
-
SHA512
897051489f7894401566c43ce85e01905588a566beeab6143a3bd5d5d8a3fb3e132b5d0fc209efbf56292e2fc32404bdcb2ff78dcf40432dc0a4eb342da67452
-
SSDEEP
6144:N5jmq1TQn9Q2eZEIRU7iHryhzOJIoAGBTgSBjP7A+mRrOdwd5dZ2D:N5jm6Q9Q2eZEI9rnAktpPERrOdwdW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 452eeb31f62266879cea22a9f04664d7_JaffaCakes118
Files
-
452eeb31f62266879cea22a9f04664d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yvs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE