Static task
static1
Behavioral task
behavioral1
Sample
52fb9422d9a739d3a7fde743b9aa0036_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
52fb9422d9a739d3a7fde743b9aa0036_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52fb9422d9a739d3a7fde743b9aa0036_JaffaCakes118
-
Size
27KB
-
MD5
52fb9422d9a739d3a7fde743b9aa0036
-
SHA1
8ae6ab02b9740e450a1d8e5f361305612215f0ba
-
SHA256
1dbe2017166d00ddddd4585060cc763e042b334a7c116ae7fc00b109403476ad
-
SHA512
f76808e39edf1e0747a1f7b5837f1258dca3f8cfd10738baa01c7d763cd7b8de32cce012dc686b820c802673b93cce323458759470847aa92fd0ada0562730c3
-
SSDEEP
384:99N0V238E6JdemmD+6Xps6Sh/jTJrE17mU60E2cYo4daroFXof8t:kWO6XpSp1rQmU3ZcYWFm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52fb9422d9a739d3a7fde743b9aa0036_JaffaCakes118
Files
-
52fb9422d9a739d3a7fde743b9aa0036_JaffaCakes118.exe windows:4 windows x86 arch:x86
883cffa0911d03ddee074adc06ac3003
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
LoadLibraryA
VirtualAlloc
GetProcAddress
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ