Static task
static1
Behavioral task
behavioral1
Sample
53b9d3a3806b0ac7d8b9f0e165543956_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53b9d3a3806b0ac7d8b9f0e165543956_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53b9d3a3806b0ac7d8b9f0e165543956_JaffaCakes118
-
Size
39KB
-
MD5
53b9d3a3806b0ac7d8b9f0e165543956
-
SHA1
1ab1a62a89b8fe0f5cf55b0724e82c82b59e18f6
-
SHA256
c5efb777a622e347fb23fb5876cbe7e4ae923aee295bc9cd7325fb3c068a8fbb
-
SHA512
c7c4f38e5f02f41dc88e8fe5554a82b47771642629c0f1241af175fd5b62aea88f061f21ef793c8ddad24191915133a0c543ec87fe8855cf7ecd5621a7d49501
-
SSDEEP
768:Y+nQBX0uZgAu/TT/Fa/wMKzrY4Pz1JKg2fBv4MSypO43wP/:Yf5ZI/TTda/wMCZPz1JKg2vxppO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53b9d3a3806b0ac7d8b9f0e165543956_JaffaCakes118
Files
-
53b9d3a3806b0ac7d8b9f0e165543956_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
csa3ywy0 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yimelj28 Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE