Static task
static1
Behavioral task
behavioral1
Sample
52e57b5d150c318d9b93df4706b29215_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
52e57b5d150c318d9b93df4706b29215_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52e57b5d150c318d9b93df4706b29215_JaffaCakes118
-
Size
410KB
-
MD5
52e57b5d150c318d9b93df4706b29215
-
SHA1
0e77fa562ad4341794aebf451d079fb28cb5cd7a
-
SHA256
96bece724bfe8c0fae4f986ed0e456c427e26e202da1275e88be7f6d2a01e7e5
-
SHA512
3f8475a0b77cefd7eb5f4cd0958829276ecc3c3341ade7644eda4d63bdd6c573bdde6a681172674834b87af5ec0a71d93388d5f56c8929725d12ad8e8bc129f1
-
SSDEEP
6144:5i+IG2E1hn+v41ltZJaTapvPjbspq7NNr6IQI1mgNJbhmj4qlYUA1fvZ:5CGPkw1P7BakRY5IYors4qlyf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52e57b5d150c318d9b93df4706b29215_JaffaCakes118
Files
-
52e57b5d150c318d9b93df4706b29215_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 391KB - Virtual size: 799KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 455KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ