Static task
static1
Behavioral task
behavioral1
Sample
53bef1d2decc72f5f1a1ff3c0b98dab4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53bef1d2decc72f5f1a1ff3c0b98dab4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53bef1d2decc72f5f1a1ff3c0b98dab4_JaffaCakes118
-
Size
1.9MB
-
MD5
53bef1d2decc72f5f1a1ff3c0b98dab4
-
SHA1
cfdd76da7f61b98c30a8259b1a56decf2ff8aea0
-
SHA256
c93521aad6e73ca25b68bde29856f0f7d53032fab3138a534ff3ff3855d5b9da
-
SHA512
b73dab5435674f8e48c970b0e8810a5c5c053889f4b7ff3fe289a70df752f2632581eff4e4b220a2a6d48b3456ec422467ffa4dda2a6da748b770e6ebeff5ca0
-
SSDEEP
49152:cEQPGnMzYnUMnMvoqcS3hZI9ONaRGM30N4EyN12kg125RP:cEQPGMgT4oqcSRZI9ONZhvCo12HP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53bef1d2decc72f5f1a1ff3c0b98dab4_JaffaCakes118 -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
53bef1d2decc72f5f1a1ff3c0b98dab4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 131KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 302KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE