Static task
static1
Behavioral task
behavioral1
Sample
52bff70652d40b4b8416ab350e323f0e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52bff70652d40b4b8416ab350e323f0e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52bff70652d40b4b8416ab350e323f0e_JaffaCakes118
-
Size
8KB
-
MD5
52bff70652d40b4b8416ab350e323f0e
-
SHA1
5c502c0f8febbb77a94bde54988db9785316ae2b
-
SHA256
e08d652c497a677f3876bd73bac98ad10681572f7b5fae3ff3dd73bb3ef25e81
-
SHA512
80457ee22e38e21e6d5cb5c960da4bd20ed853d483b0118587f802d4cccacf3ed179456a56f97bda9090cb522d9b362c5366c79856b8d856499427d93ca42216
-
SSDEEP
96:/lxhgCYkejZpQTyiJSyPadN9kA2r1fB41UWgrq8FWwG+F0Mu1Ei5/N9B:/TOCTegT9JXPOYxXDWF8FWNa0M8T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52bff70652d40b4b8416ab350e323f0e_JaffaCakes118
Files
-
52bff70652d40b4b8416ab350e323f0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE