Static task
static1
Behavioral task
behavioral1
Sample
52d66f779231254fa0154770c796e7dc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52d66f779231254fa0154770c796e7dc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52d66f779231254fa0154770c796e7dc_JaffaCakes118
-
Size
1.0MB
-
MD5
52d66f779231254fa0154770c796e7dc
-
SHA1
6a63f1ee547c534858a634657e7ab53fbbbd4a15
-
SHA256
3072a6a616b078b028d47f3d8faa51db165e60be2e7a05866cce6ba62748612b
-
SHA512
e5f5577e5c38378b1a1fa4f798f14646bf2be2f604824832644e925b509802db0adb9d42787705bef6f0c00b3943667a22283b1974967f950eb517817f813836
-
SSDEEP
12288:lDZTKguc0ga3GWdAk+zUSUCKSfS+BzOjBjhWpYibofyKfb2/Z7kPu4zOvGhHeZWP:lDQc/aWW+j6C96DFjCYOgyK0k24zFhHZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52d66f779231254fa0154770c796e7dc_JaffaCakes118
Files
-
52d66f779231254fa0154770c796e7dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 257B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ