Static task
static1
Behavioral task
behavioral1
Sample
52d8189020bffa6829a818c0ddaf1249_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52d8189020bffa6829a818c0ddaf1249_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52d8189020bffa6829a818c0ddaf1249_JaffaCakes118
-
Size
164KB
-
MD5
52d8189020bffa6829a818c0ddaf1249
-
SHA1
de8d58100df1eaa57bdd4d1cbcb41343ce423666
-
SHA256
a6d40a605476cccbd33a33f16017e0d328b6f915327adde1d69fb5d9e2ea4d4e
-
SHA512
80e33544976ae7a92859fc892c9a7ae7e3ea921a4bfee6e8eff1eac82b74c9d8965b98405416a72e6e88d23b8137b2e4bc1fa59b6aaae4f0ee072ce1dbc81aca
-
SSDEEP
3072:uUvJ8VD/gHBkxKiO7LyNcrXz8/MhC1/Punxvha82LGxz:9s/g2VN8o0hClXKz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52d8189020bffa6829a818c0ddaf1249_JaffaCakes118
Files
-
52d8189020bffa6829a818c0ddaf1249_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 336KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE