Static task
static1
Behavioral task
behavioral1
Sample
534143d91cb08296a94e026e2758f784_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
534143d91cb08296a94e026e2758f784_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
534143d91cb08296a94e026e2758f784_JaffaCakes118
-
Size
87KB
-
MD5
534143d91cb08296a94e026e2758f784
-
SHA1
59abdcd2f5c6112ccbc1838702093d3a22d59bf3
-
SHA256
b47a3dcc72128ab6f571d77e8bba25c8050fdc3bdf2a3eec3efce789c3414a45
-
SHA512
24e8e85a1dfd093aa89a04a4da08e143ee07106659fb8feb98fdbfb011f5e11b2dc51cb84d0b55642653d3c907a39a8fb121c672322d269ce0975ee0fe5d3062
-
SSDEEP
1536:NEIUuOFpUjSfCO5lb0pTgtq4a3lKQP1yDG/IhRye7RxTwf9fu3ia5XpN:N6ugChpk/qlKQgybSRxa9fu17
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 534143d91cb08296a94e026e2758f784_JaffaCakes118
Files
-
534143d91cb08296a94e026e2758f784_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bebefloo Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE