Static task
static1
Behavioral task
behavioral1
Sample
52b6f266e37be987217f54ad600e5732_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52b6f266e37be987217f54ad600e5732_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52b6f266e37be987217f54ad600e5732_JaffaCakes118
-
Size
119KB
-
MD5
52b6f266e37be987217f54ad600e5732
-
SHA1
247be0b6abc81b48a58b5bea6060be531dc8e4ed
-
SHA256
8c14fd4f85ec9d350e0d584d238ca88a8c2397e2133b5102adc37023962a1e5b
-
SHA512
80fec078baf95ed93ebf0d275aedf2d06cac14b5cf6cecc9144fc2583cdd00c2c5878a10998534e7df522863a42b14a7cb00bb5f72093fe47f977723bcef1bee
-
SSDEEP
768:BB7varLCF+VJC2Rm23vT1cwLZRLDC/qeNUOaQLLxPawrfpVxHYykv4U/Fh+akVZr:BB72JCvSTeS4q1aYw/x58TFh+VVJg0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52b6f266e37be987217f54ad600e5732_JaffaCakes118
Files
-
52b6f266e37be987217f54ad600e5732_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 516B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE