Static task
static1
Behavioral task
behavioral1
Sample
53c9276861a5a69a976da5782b6d469e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53c9276861a5a69a976da5782b6d469e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53c9276861a5a69a976da5782b6d469e_JaffaCakes118
-
Size
27KB
-
MD5
53c9276861a5a69a976da5782b6d469e
-
SHA1
aa8dc012a67e6c9a9094b8a78ceea1ccaac3598f
-
SHA256
b838f78d70fb638df008ec57f236ff6667480262a0cf81a2f9d98780281d1cab
-
SHA512
a900aafbc4604211feb1fff88aee218afe1ccfc5bfe6fa95ee1114e09729e3fc2f782d2b2f4b16765b99870477a428b6a345d92493492c00cf596adece6d136f
-
SSDEEP
96:15MGXHWJOfn15MGXHWJOfn15MGXHWJOfn/+6x25MGXHWJOfn15MGXHWJOfn:0GXipGXipGXiuxRGXipGXi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53c9276861a5a69a976da5782b6d469e_JaffaCakes118
Files
-
53c9276861a5a69a976da5782b6d469e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 19KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ximera Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE