Static task
static1
Behavioral task
behavioral1
Sample
54600c99ca47c402f688c69353ec7b68_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
54600c99ca47c402f688c69353ec7b68_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
54600c99ca47c402f688c69353ec7b68_JaffaCakes118
-
Size
715KB
-
MD5
54600c99ca47c402f688c69353ec7b68
-
SHA1
9596e685bde74d171c91351ca04a153f713408ff
-
SHA256
bfbc60f426ea9d58bfc8f1da6e50a32ad46361718457f9d0037811b2d9448a63
-
SHA512
33af09498451e5c8eefd17fbb7448d5c300080be30f8068a0558f71f59b44efc47ef59c6d6cb380820879ac6de0adaa5343578bd69cf1c48eade26209b774ef5
-
SSDEEP
12288:XNh/KekElefHrBOkqTqlqJf93Aw1f2AI/XzYpHd3vNjga4fHdgb+RQveHRag32Vl:XNhH9efMdT94LXzmt10aAgyOORa62u0Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54600c99ca47c402f688c69353ec7b68_JaffaCakes118
Files
-
54600c99ca47c402f688c69353ec7b68_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jeqK Size: 68KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.5tOx Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Vwa Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lSXo Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE