Static task
static1
Behavioral task
behavioral1
Sample
53a883eca42b01b18a1c0fc0d01136d9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53a883eca42b01b18a1c0fc0d01136d9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53a883eca42b01b18a1c0fc0d01136d9_JaffaCakes118
-
Size
36KB
-
MD5
53a883eca42b01b18a1c0fc0d01136d9
-
SHA1
6d1a82ad8116e29c804df9dd7ca293ca9b9e86de
-
SHA256
c79ef88cb953e2642b60212ad34b44ee931f49b0d9487dd10e407c5d8fe65a32
-
SHA512
be17c8f1ae915d6752d7016edb5bc96c79d9cd822539cc8d43ecdb289dd5dcef2dfc14799e126ab6f312fecc0f6a6f075606a1d3a6572b7a56239349fea8fa44
-
SSDEEP
768:KGHXWjrf9HvIdMcvsGLl2U1qtLC50Ikzx78wxYGP23CiMH7a2hx/j2RdjEyravKg:KUpEVZ3TiZCodafXN0y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53a883eca42b01b18a1c0fc0d01136d9_JaffaCakes118
Files
-
53a883eca42b01b18a1c0fc0d01136d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ