Static task
static1
Behavioral task
behavioral1
Sample
54823202267c2eb3bb2ff729c6b3705b_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
54823202267c2eb3bb2ff729c6b3705b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
54823202267c2eb3bb2ff729c6b3705b_JaffaCakes118
-
Size
79KB
-
MD5
54823202267c2eb3bb2ff729c6b3705b
-
SHA1
9f5f36dc37f3f904ac4c6e9125731a417266dec7
-
SHA256
97d7b10267939b39cb746aae64eb65f83f29cee06ff53f1e0e1c9f6be6babb74
-
SHA512
9f966b010e57d88626daf944bbb2cdb2e4e6646f3dd5d3443ca9e3804a5a617dd9acf8bc6202f054ce22d816a5724fa95953c2956f20766299df728d1c4d46d6
-
SSDEEP
1536:Ed2+qf+36yEIfi/qYmOdPitVII+55itekBYikf4EYBew6iXoJZT9svDC4Ynn+I:Ed2+qm3JEI4muaJ+fitTBqf4Tj6iXoJH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54823202267c2eb3bb2ff729c6b3705b_JaffaCakes118
Files
-
54823202267c2eb3bb2ff729c6b3705b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 40KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 1024B - Virtual size: 805B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE