Static task
static1
Behavioral task
behavioral1
Sample
52f0985c27c07e66388f7b8f50d210d6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52f0985c27c07e66388f7b8f50d210d6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52f0985c27c07e66388f7b8f50d210d6_JaffaCakes118
-
Size
1013KB
-
MD5
52f0985c27c07e66388f7b8f50d210d6
-
SHA1
6ac787f4a4de03e25c05c26326d9196d0f59e4c9
-
SHA256
d7c0cf312941a3094ab43c92876095d8bd2d1c9cb4ca6c2717fba76384641e58
-
SHA512
22b2bd2b47deb40718256a76d8ac47c93ccb64a7648653575600eb84fceacf8b31aedcab2c2e9e220eaccc91d01cf10e220e1c384c3afb1fe5062c0e20e27938
-
SSDEEP
3072:boFZSQ895kPwaH8y0YrftKo8PiKxl8k7H4+CPolWyG6wYR5KKfKO9iYqE4xm:boTzwacQrfWHbYJPo0n67R5xT9WE4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52f0985c27c07e66388f7b8f50d210d6_JaffaCakes118
Files
-
52f0985c27c07e66388f7b8f50d210d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE