Static task
static1
Behavioral task
behavioral1
Sample
0af92ae67e4ce4bff17d73dffb27c588_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0af92ae67e4ce4bff17d73dffb27c588_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0af92ae67e4ce4bff17d73dffb27c588_JaffaCakes118
-
Size
56KB
-
MD5
0af92ae67e4ce4bff17d73dffb27c588
-
SHA1
a3ed4f74d2e7ada9109b2db764b3638b19e034bf
-
SHA256
f451b671ef3e556ff83bcd84f3d1387843df7df846c9d76aaa9d620f52e79916
-
SHA512
68bec50984475ff9119e05466f93647dab245d1e0466448f4a7b00edc407073ada4408252cd129fb1c6427ae1d2f2d4e7d1ab45ec058c377d937af4045f9baaf
-
SSDEEP
768:SdQPvsMNPZ4TFDmSXKTXKwPaPcdPxdaRs:SdQ3sMNPZA8LFdGs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0af92ae67e4ce4bff17d73dffb27c588_JaffaCakes118
Files
-
0af92ae67e4ce4bff17d73dffb27c588_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ