Static task
static1
Behavioral task
behavioral1
Sample
573bcc21cfa1b29fb7b60d2b89ffbf52_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
573bcc21cfa1b29fb7b60d2b89ffbf52_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
573bcc21cfa1b29fb7b60d2b89ffbf52_JaffaCakes118
-
Size
136KB
-
MD5
573bcc21cfa1b29fb7b60d2b89ffbf52
-
SHA1
e5578f12dd052548f342d5815cb0c33c2ca4e453
-
SHA256
01c249c5de2314cc3068224953e3b8d57926ad2dc69599b06676ae7cf3b9893a
-
SHA512
d11c8feb751261f5a326e6dfb62d0dae67cd2e3c0137b9de443e4123c5163965027eca09043b2c5786612124ace243ff898d1b2a0fd74f5173d79c7be9a4d254
-
SSDEEP
3072:uHSYp9cIMnhkMDl7LkdCQROm/valR+NTEUVXiYIjyi2bO:ZYp9cIMnhkMDhHQROm/Y+1yi56
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 573bcc21cfa1b29fb7b60d2b89ffbf52_JaffaCakes118
Files
-
573bcc21cfa1b29fb7b60d2b89ffbf52_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
fu.kkkkk Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
masdfssd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dfsdarad Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
holaaaaa Size: 737.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE