Static task
static1
Behavioral task
behavioral1
Sample
521ca5a51bb372e526795420d4fa0a2d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
521ca5a51bb372e526795420d4fa0a2d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
521ca5a51bb372e526795420d4fa0a2d_JaffaCakes118
-
Size
346KB
-
MD5
521ca5a51bb372e526795420d4fa0a2d
-
SHA1
7daaae3bd861549ab4fdf94695b954feea24224d
-
SHA256
6be812910cdb22b8ce4fc378b0215d138fc142a10e263c47267111d8e42c9d89
-
SHA512
3458024b1efc3b0e8fc81ac599f85b55c7545e20989edab909832766d85c68d7ded427f245bf7b2ef25ab36e0e84d86c4ea5a606081d92341e90aae812fa893f
-
SSDEEP
6144:UbQWYUdxIc4wvP6bQ7yMP+DE827X8xdtDcqMZl7XwvP6bQ7yMP+DE827j2:61R6b7MP+Dd2D8jmVo6b7MP+Dd22
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 521ca5a51bb372e526795420d4fa0a2d_JaffaCakes118
Files
-
521ca5a51bb372e526795420d4fa0a2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 45KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gogoloa Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE