Static task
static1
Behavioral task
behavioral1
Sample
51f0f9754d4fe1f1ccd19ad6f0f09e9c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
51f0f9754d4fe1f1ccd19ad6f0f09e9c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
51f0f9754d4fe1f1ccd19ad6f0f09e9c_JaffaCakes118
-
Size
19KB
-
MD5
51f0f9754d4fe1f1ccd19ad6f0f09e9c
-
SHA1
82d4552cbcfa40b31b25fe413a8f1fa55fe95827
-
SHA256
ea10c4fb9c9ed6d5594e577b1a85ff7c338f8b799b089654006763bedec383fd
-
SHA512
2e4a88e2ddcc00be3bc4db7f0480793c5a7bebb8c5b5e52fba59a7d1b4f6f3255e93861510a2d566eb78c36461ef7ebc35e39b043cad3d636ab9fd3c82e55470
-
SSDEEP
384:vH82YOrs6i6MKvycdWGIS/Pg5nPEdbd4UNIH2CnJnaO8wKYZsda8bUoEV:vhYz61vCGIS/PNdxNIWCJ/838sfDE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51f0f9754d4fe1f1ccd19ad6f0f09e9c_JaffaCakes118
Files
-
51f0f9754d4fe1f1ccd19ad6f0f09e9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE