Static task
static1
Behavioral task
behavioral1
Sample
af0e69b971449a79ad0610f3c44398e6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af0e69b971449a79ad0610f3c44398e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af0e69b971449a79ad0610f3c44398e6_JaffaCakes118
-
Size
728KB
-
MD5
af0e69b971449a79ad0610f3c44398e6
-
SHA1
b7f13bd92120d539c463df9df50471fcb18ae71e
-
SHA256
5263cd652cd8ae06c3e73a5ee175d412ecd2663a0746ac30ddbfd4bba9a0052b
-
SHA512
9293a332fb2501b42877b6b84f8f1573102f2e68de89e6638567d54d8c98e51bac3ea4ba1020d854890cf4d99f7db2c205d7ef0679565cec9cc8eeba4f63d350
-
SSDEEP
12288:6YU0bdqzUzOaWnoK4d4GGyBDQsttggzmkGacIm0atM+75pnMaUF9n6Bd7+hMM:aaWB040eCWD30atNlUF9nY+hJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af0e69b971449a79ad0610f3c44398e6_JaffaCakes118
Files
-
af0e69b971449a79ad0610f3c44398e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ