Static task
static1
Behavioral task
behavioral1
Sample
af0fc4e15756b0f14da82dac3ae4851c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af0fc4e15756b0f14da82dac3ae4851c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af0fc4e15756b0f14da82dac3ae4851c_JaffaCakes118
-
Size
1.8MB
-
MD5
af0fc4e15756b0f14da82dac3ae4851c
-
SHA1
c921791f19ff41cfd39924b159f9ec81b82d9cef
-
SHA256
f65760c6bb2c05841b597e48b43cb2722b8074a451ad087fad845af3fb126702
-
SHA512
c0b2439f9d2d538ec456ab015cd46cc42249b93b0a1c55f475d676b1c9cec430c962c7c3cc06b9cbb19637f98c5ec0986fb9f094b27f739994cac50035572a0a
-
SSDEEP
49152:8tPGSO0LvT/1BoNsCSqpZXNrx7qbChZNNH3S/n5pN9j9:sxLvjToyAXqmXQn5P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af0fc4e15756b0f14da82dac3ae4851c_JaffaCakes118
Files
-
af0fc4e15756b0f14da82dac3ae4851c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
d6UYpw99 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jaqKROR3 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NCc6R0Vc Size: 746KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
A77EoXSF Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hFJYJqR7 Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qmU8OH9r Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rPzgHhBP Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ