Static task
static1
Behavioral task
behavioral1
Sample
52a50f9051f5de70250ab61ebbfdcf0a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
52a50f9051f5de70250ab61ebbfdcf0a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52a50f9051f5de70250ab61ebbfdcf0a_JaffaCakes118
-
Size
453KB
-
MD5
52a50f9051f5de70250ab61ebbfdcf0a
-
SHA1
6d755a1e437205689b7d2428bdcde8155480d168
-
SHA256
54204048954dd13a048def2908b410c9a475186223d159787bb2bef39730b3c4
-
SHA512
06622871a98f56d3f3dc508440d9443ad48b0ad8e33a9dc7cb7950716c4f029467494ef611c6230ba8262bb907d3132cef7b7f37553a59158d9f7dd1153f0b02
-
SSDEEP
6144:F7FCq9gkZJsnKmoQJurKKY+K3MoXsDbdhnBStweFQm8Y:RFdLJsnKmoyurKKYLXsDbDnBReF78Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52a50f9051f5de70250ab61ebbfdcf0a_JaffaCakes118
Files
-
52a50f9051f5de70250ab61ebbfdcf0a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 334KB - Virtual size: 334KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
STLPORT_ Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ