Static task
static1
Behavioral task
behavioral1
Sample
56da3f73df9764337011d667ed3174ba_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
56da3f73df9764337011d667ed3174ba_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
56da3f73df9764337011d667ed3174ba_JaffaCakes118
-
Size
19KB
-
MD5
56da3f73df9764337011d667ed3174ba
-
SHA1
82df96fdc9f51dda261407c5d6010419ecec91a5
-
SHA256
a0d39d0f0a9660a3e9121956195c1cdcfe69a66d26cfafc42bbffc52c0a64f05
-
SHA512
dfd2e8a1187332f94e8c0468781d7de8cf8dabb18b2cf95c5bdfb2e616ce2f762a8ae46aaa2e229f8a02eca56c9688b6a83a511100e92acd4a0be3f05834f39b
-
SSDEEP
384:tmctQYQB3a1QFPj3J2F45nHMHVPN4RT2Nh7qrbmtZtGZ:tmclQBg2Pl2FMH+V15rA6Zk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56da3f73df9764337011d667ed3174ba_JaffaCakes118
Files
-
56da3f73df9764337011d667ed3174ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ