Static task
static1
Behavioral task
behavioral1
Sample
af4868303124ee4f765a16328e8993a6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af4868303124ee4f765a16328e8993a6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af4868303124ee4f765a16328e8993a6_JaffaCakes118
-
Size
20KB
-
MD5
af4868303124ee4f765a16328e8993a6
-
SHA1
58f0b5809a9140516a13d68a57388132f93c3a8e
-
SHA256
ffc49c8fd266e46d2cf1f02f62b143c8f005c88e6b01f9e022325744f55e2f07
-
SHA512
33f98d8a944f59d9a85b605335bb9e6b2e4b7c977eb987076f3cb7faabc02d62fea509e469779bdca52635d9a66f7af3e62143ea4c74a2e34551bfc8b6c21ebe
-
SSDEEP
384:xYJMB+WkLkqq8YBXjpDX8WkmAplrVymRijljo:yWBNkLu8UjNX8W1AplrVymk+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af4868303124ee4f765a16328e8993a6_JaffaCakes118
Files
-
af4868303124ee4f765a16328e8993a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
����t Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����a Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE