Static task
static1
Behavioral task
behavioral1
Sample
51fc4449ffb590bbfa9ca62ba5094dd6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
51fc4449ffb590bbfa9ca62ba5094dd6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
51fc4449ffb590bbfa9ca62ba5094dd6_JaffaCakes118
-
Size
224KB
-
MD5
51fc4449ffb590bbfa9ca62ba5094dd6
-
SHA1
bdb6125d05b590d9153615a130e181a23e8f1693
-
SHA256
ed284e6cc9fe3f59cb894ba15e1af195a01eee5bf6e76423285555b29adef1aa
-
SHA512
3c2e72844eb773173956700ba26fa6aa88cfa25b6eff77117ce9e0f06976d77caf5f81b1343274e0cc865cc311f82c745a04658adfe14dc559ace4dbd4f0da89
-
SSDEEP
6144:X9Ufck820QNdJSJw8E7ovjtSpA4dPAnwOpKi08WHG:NNk829DgJw8E7oAPdP/i0Lm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51fc4449ffb590bbfa9ca62ba5094dd6_JaffaCakes118
Files
-
51fc4449ffb590bbfa9ca62ba5094dd6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
tTcv0 Size: - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tTcv1 Size: 303KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tTcv2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE