Static task
static1
Behavioral task
behavioral1
Sample
52b938f8246cead61c32009836b54ff4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52b938f8246cead61c32009836b54ff4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52b938f8246cead61c32009836b54ff4_JaffaCakes118
-
Size
47KB
-
MD5
52b938f8246cead61c32009836b54ff4
-
SHA1
cd62c0264f5a43b5ef9ac41511f360c374c53e38
-
SHA256
6590cfefac40502b042d59834cf9dbb8aa3683cf6f68376aefdcd1cb7a90c235
-
SHA512
c9e0ac37f277ff0f49161a818427880fd2b82e443d72bb486b181c6560b513541ef163414e8b57bca2ca3497940e5d9037de22d3bca3da482777660a6a6e9d66
-
SSDEEP
768:NAwtoD3aNW+XIRz7osL/KwDoPSJHzLd7GiX85FdXZf4FHv9Ued:uwtoD3+4RvosL/ymHvdSF5fXal9U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52b938f8246cead61c32009836b54ff4_JaffaCakes118
Files
-
52b938f8246cead61c32009836b54ff4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.blwobph Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ygiwdmn Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 49B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 67B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ximera Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DalKiT Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 155B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 174B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
hazrio.e Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE