Static task
static1
Behavioral task
behavioral1
Sample
af9c34879b99a540e6430a542c3af0c6_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
af9c34879b99a540e6430a542c3af0c6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
af9c34879b99a540e6430a542c3af0c6_JaffaCakes118
-
Size
1.3MB
-
MD5
af9c34879b99a540e6430a542c3af0c6
-
SHA1
ce08e8f4fa1d42d63308d9b7e1e64087b3e8c8b9
-
SHA256
8aee039204365afebc4523333d1af8b86cf3efcb5195c593ea6ee9e2b32fc28b
-
SHA512
af7337bd6478568a2e69c177f9fdd045d0b879a40f6ae0bb9bd2935e6f01d53a251f11e8ca97ef0fb1e54b974ae0420b58396c1b042a5715794681eb0a48e7e4
-
SSDEEP
24576:UuhaaBh+erQZb+md4wmAM8c//////trr8q4pVWxa4CeZJ8NI8r:bkerQZbd2kc//////eWxvD8r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af9c34879b99a540e6430a542c3af0c6_JaffaCakes118
Files
-
af9c34879b99a540e6430a542c3af0c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ