Static task
static1
Behavioral task
behavioral1
Sample
55ad84c6220f4246843978227b3292b0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
55ad84c6220f4246843978227b3292b0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
55ad84c6220f4246843978227b3292b0_JaffaCakes118
-
Size
81KB
-
MD5
55ad84c6220f4246843978227b3292b0
-
SHA1
2d4a2aa62187610918681eb3597eb3ed0ed1ccdc
-
SHA256
208b576abdc10d659066c153c4a7f560a01563cc957d6ea852ed60cb0e435f03
-
SHA512
51526ba4ca512af3d2c607343cc871c973472399b53ad78347655ca58839b5c855583194345ba5024aeb2c5859d824885e993946a68c6424702e93e54a55c589
-
SSDEEP
768:sPAfF83njnh9iYHlNRey67pcHy227jwhoLXANDu+v/Xp8tOZzb2+B/6hj6FepQvC:sPFTGYHfUxcS227Uc6TfpNLUj6UqKgtY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55ad84c6220f4246843978227b3292b0_JaffaCakes118
Files
-
55ad84c6220f4246843978227b3292b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE