Static task
static1
Behavioral task
behavioral1
Sample
52b906e9348de4f2f287efc3f9172579_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52b906e9348de4f2f287efc3f9172579_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52b906e9348de4f2f287efc3f9172579_JaffaCakes118
-
Size
15KB
-
MD5
52b906e9348de4f2f287efc3f9172579
-
SHA1
1f7a96823c1d7234cbd76fae3c6cf7f99b820d0b
-
SHA256
bc970b49dbfbdd7b85606e5ea249ea0d5fff1bb2553302cf6b5b7bd775bb482a
-
SHA512
f38bf5624168963d7a8eeb606b1ed606ca1157b0b24a019df8e14a9aee36dc36ebfdae0b501c1aa00082eea23b13a64ca76cc0b8e25296b9879c29a3f3a18a74
-
SSDEEP
384:8FrdkA83kDvku/jCrNCtFr/6Vjy4D8MSbl3FkY+m+:8F5kAekAUjAUtFj8fDaZFk7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52b906e9348de4f2f287efc3f9172579_JaffaCakes118
Files
-
52b906e9348de4f2f287efc3f9172579_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
`P!UC��� Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4�$g�r4� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE