Static task
static1
Behavioral task
behavioral1
Sample
af48c0ce2a76cfd3a58b81d2bd65e262_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
af48c0ce2a76cfd3a58b81d2bd65e262_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af48c0ce2a76cfd3a58b81d2bd65e262_JaffaCakes118
-
Size
673KB
-
MD5
af48c0ce2a76cfd3a58b81d2bd65e262
-
SHA1
21e3e65ad5c37a3d1d5789b96a8e76e7683705bf
-
SHA256
332bb0e3b2e7eda8d3fffd996dc7441ed252bde4b34f4b5d6eb108313f440067
-
SHA512
77753be9060452b05b4f551862218c435ae8abfe8b7423641a823b625aeee21ddb552947b4735a2a2003844e8be8a22cd49a08d8a374524da3a4621705cef71e
-
SSDEEP
12288:04IAuCZYJH5RldSnnjPqQTkzmlTrn8KAnIN7jxoJgb4f2Se:0lLCZg5RX4jLTkzclAn8PbIe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af48c0ce2a76cfd3a58b81d2bd65e262_JaffaCakes118
Files
-
af48c0ce2a76cfd3a58b81d2bd65e262_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 401KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.nkh Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE