Static task
static1
Behavioral task
behavioral1
Sample
af0c095c36df02c4ea9ed3e4202585eb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
af0c095c36df02c4ea9ed3e4202585eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af0c095c36df02c4ea9ed3e4202585eb_JaffaCakes118
-
Size
100KB
-
MD5
af0c095c36df02c4ea9ed3e4202585eb
-
SHA1
e87bbcd522b1ad5a354b369c74b736b78fdbedae
-
SHA256
a6f78f8e5b537b067a82d755bfbf37c864e2a88fbfda1c15c5fd088047cfee0b
-
SHA512
8815556002c5b7ba1a732987c37cb63f89b8f32bd767331cbb7d0739951597a06d3787f214c5a795df9691ea04a30b8ad43631f9b6a0338a32b51bfcddc458b5
-
SSDEEP
3072:DZaEFiiF+7m3D+zazmaGDbj2X+MUSXPWzBhanLA+zac:dpYiWmTeEBGDnY+MUSfgBhaEez
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af0c095c36df02c4ea9ed3e4202585eb_JaffaCakes118
Files
-
af0c095c36df02c4ea9ed3e4202585eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
gb5etn Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lga Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE