Static task
static1
Behavioral task
behavioral1
Sample
523126a6f348a8d0a87be3ce076f7923_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
523126a6f348a8d0a87be3ce076f7923_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
523126a6f348a8d0a87be3ce076f7923_JaffaCakes118
-
Size
1.8MB
-
MD5
523126a6f348a8d0a87be3ce076f7923
-
SHA1
2627ca6de51cfb8749fd22189188abc522601e75
-
SHA256
a5b015e313df881063f8fe51db9bc99f53db7a0f42a0f4efea6d6e6682769396
-
SHA512
f0a1c58fbaf31b01b53453cf84bf36dbc70ffde58863d9c943b905c4f1c9586db8a785f3c9af9f3752c431f87b9f073dce6cd48b1180a73ba75a3142abbf1b94
-
SSDEEP
49152:/TBPHFfMFHzAfn4gtWSxKtAYrh63PuiitM0U:LBPFqTin4pmwA26311f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 523126a6f348a8d0a87be3ce076f7923_JaffaCakes118
Files
-
523126a6f348a8d0a87be3ce076f7923_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 271KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 121KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 974KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hmmbn Size: 352KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE