Static task
static1
Behavioral task
behavioral1
Sample
53070eecbf4493449b38448562d6b7ca_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
53070eecbf4493449b38448562d6b7ca_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53070eecbf4493449b38448562d6b7ca_JaffaCakes118
-
Size
312KB
-
MD5
53070eecbf4493449b38448562d6b7ca
-
SHA1
40098c6b875eeba8ddfcda3f660a0c3badec1e77
-
SHA256
69522cb722b3b31b9b59e42dc2fb101d0c7921de5986b6fd09559297a153d329
-
SHA512
4b8fdf658f1d28a5d50edf7703668549f8c840660db2a9fafbaabcb1039000799972ebccac12cf4a7e987a6e019c60f99211675196083db727ecf02cd9f29ea2
-
SSDEEP
6144:naO2q6MzasGb9vvOzsMxukebwLTjs3FsVmu9hDkH3DPRTuU:nPTzv2HOzsMxukYavs3CmuXDkX9uU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53070eecbf4493449b38448562d6b7ca_JaffaCakes118
Files
-
53070eecbf4493449b38448562d6b7ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 304KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
STA4 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE