Static task
static1
Behavioral task
behavioral1
Sample
af500da3f77c0817766dcf613bbcef96_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af500da3f77c0817766dcf613bbcef96_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af500da3f77c0817766dcf613bbcef96_JaffaCakes118
-
Size
9KB
-
MD5
af500da3f77c0817766dcf613bbcef96
-
SHA1
9c3e3d45e7a41ddfa827f31d4978608eb9d18b4b
-
SHA256
459d84608eb00cb37451d73dfcba0f25bb763709b3c129ea1f29df3d28441abc
-
SHA512
7424c809b45481597359c7b6c4f72b3f2bfb2fb625803e4485a24f0c47ea76782e242c52dd8c9bdb6cfa1a02e27427d8a6ccfd589bf8fe6ac5203d295e30e668
-
SSDEEP
192:r59jTl0zx9JTAwjUlcmW0uCsSu0vm9VZFzW/Dq:r59j5Q9JTAyUlcCu0vaFiDq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af500da3f77c0817766dcf613bbcef96_JaffaCakes118
Files
-
af500da3f77c0817766dcf613bbcef96_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE