Static task
static1
Behavioral task
behavioral1
Sample
952f28b649527ca1ff1e50f00bc47bd9_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
952f28b649527ca1ff1e50f00bc47bd9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
952f28b649527ca1ff1e50f00bc47bd9_JaffaCakes118
-
Size
53KB
-
MD5
952f28b649527ca1ff1e50f00bc47bd9
-
SHA1
652ab4f2af79013af87ed383c3cedf737fecedcb
-
SHA256
2947d3afcf50070a9333ba34c133c8e77e7dd1e8a1dc3c2bfc412f1e099b5fb5
-
SHA512
1963b171f878dc3222433ed8bb4b449526c8703135a293ac18514fd9a5596be76effd20d883cd70a574cb9c38fe254605dbcc50fed2e489925f99eaf620323a7
-
SSDEEP
768:cLAPohZs0199cG/TjfTZcjXDVkAet9fSL+jAsD2Ga+vW2AWICavQJn:rozr199cIvf6TDVpnLAAqXxO2A/4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 952f28b649527ca1ff1e50f00bc47bd9_JaffaCakes118
Files
-
952f28b649527ca1ff1e50f00bc47bd9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ