Static task
static1
Behavioral task
behavioral1
Sample
52ebafaad1f5fd39856e004dd3c59d32_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52ebafaad1f5fd39856e004dd3c59d32_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52ebafaad1f5fd39856e004dd3c59d32_JaffaCakes118
-
Size
153KB
-
MD5
52ebafaad1f5fd39856e004dd3c59d32
-
SHA1
504c98ae0a000fb32e39daa9af709a49586a0c9c
-
SHA256
c4cfd6a2c060e9e6e8563fce6fe3d5e065163458209c6e1217997141273a12a8
-
SHA512
c376226e9ca7052c284604032fcedb11d2ee825e82ebdea3f8c05da09252ccfc742ef95c8158303893fce2d59d2e74bb2ab314b606140270298835c698de38cf
-
SSDEEP
3072:q7ar3QBjI5XN+6ZLYaHrpuY/FirrSxwcv3tc1UFqHN9/TsEkM9lk:q7arQOXN+6Z/p9/F4gWq07CM9lk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52ebafaad1f5fd39856e004dd3c59d32_JaffaCakes118
Files
-
52ebafaad1f5fd39856e004dd3c59d32_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 42KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE