Static task
static1
Behavioral task
behavioral1
Sample
af4e09a3d2398d4b3f28e5a412fbefbb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
af4e09a3d2398d4b3f28e5a412fbefbb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af4e09a3d2398d4b3f28e5a412fbefbb_JaffaCakes118
-
Size
1.9MB
-
MD5
af4e09a3d2398d4b3f28e5a412fbefbb
-
SHA1
7977ab45a75f0ae5b0fb1a7f64706a12fcdfe006
-
SHA256
e8bd35ae1d8f5c4c8d24ba9854c8c7d8495220e5668bca25226e0d0f18e7ffcc
-
SHA512
fff971762ce80e6ab7f1ea256277e42813b0d13bd5c038b755246d8c7993fe727f000c2ea1969f34d06ce08679ef8c05d5f0ccb85bafe93780bb43276c5d4468
-
SSDEEP
49152:k6HEWF6ga00a8S2ga/VFrLPMckEpmZ6RtTOFRhtyKVNX:XNQgL0DrgAf6AmnXjN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af4e09a3d2398d4b3f28e5a412fbefbb_JaffaCakes118
Files
-
af4e09a3d2398d4b3f28e5a412fbefbb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE