Static task
static1
Behavioral task
behavioral1
Sample
af1625acc8c4f942f29b7e751894078d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af1625acc8c4f942f29b7e751894078d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af1625acc8c4f942f29b7e751894078d_JaffaCakes118
-
Size
264KB
-
MD5
af1625acc8c4f942f29b7e751894078d
-
SHA1
5120a05f96a015284c3bb9b9f2027fd5f37f521b
-
SHA256
8a71a7623e2540b3f53456f083e3f8d2b0a22a3f27ae3d5f42aedbfd46d5fb4a
-
SHA512
7d5b039064715d002ced13567ab25c2e7a293d3c9bf156c35042eb9bc7f3a255e83fb1dcce1441a3fbc922fb3806c4233cccff6b315340e82c97f29324fe4287
-
SSDEEP
768:5PNj89x/CNOHLJ4bc0xn6hU+HjGnGEx58Q5BMC:SB1HLccKnH+aLxP5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af1625acc8c4f942f29b7e751894078d_JaffaCakes118
Files
-
af1625acc8c4f942f29b7e751894078d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
TBP Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE