Static task
static1
Behavioral task
behavioral1
Sample
af1183a83a8c21df7cb5ec8d4850a1ce_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af1183a83a8c21df7cb5ec8d4850a1ce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af1183a83a8c21df7cb5ec8d4850a1ce_JaffaCakes118
-
Size
36KB
-
MD5
af1183a83a8c21df7cb5ec8d4850a1ce
-
SHA1
a6a2f39f5089a832c6459dd150669bd68376a7ba
-
SHA256
4a68e3cd6e3a5361545c99088adb791ad842353820f284aea482f8ed0110ec08
-
SHA512
5714579fff719d9bed99e93053889267468882c89a4c089348e071ff92c372a8aeb844401dddc1453ba768f42663170a172ac87705c0b2ff1e7f44099b51008f
-
SSDEEP
384:+WACuOGRxNA2uD1RqK6nYK2/KQFAZ5FF+1smH6khqKFtoI5fi0QLEl1DQLZ0KH+G:XuU1c5V2/Kn5uq2XqKaFg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af1183a83a8c21df7cb5ec8d4850a1ce_JaffaCakes118
Files
-
af1183a83a8c21df7cb5ec8d4850a1ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE