Static task
static1
Behavioral task
behavioral1
Sample
af3ad2f803d116efc57e733c193b3090_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af3ad2f803d116efc57e733c193b3090_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af3ad2f803d116efc57e733c193b3090_JaffaCakes118
-
Size
620KB
-
MD5
af3ad2f803d116efc57e733c193b3090
-
SHA1
1f783d297fe6b75a5043e813faa47252e8257752
-
SHA256
311646f8fc76166f3870e13d8123faa9ad69835576017e4d8777cdf404a0f50b
-
SHA512
82b14ce15547c90e91039fa0948f3bbeb9eaf4f19921726dd09bbea226ffc771b4f8d17873bc3737fb243766bcb9b94e2eb3d96a94785ee09f55da63de6b6063
-
SSDEEP
6144:7KAuSCA5HA3N/tt36tttXN/tt36tttWglUstWiwE5f4bMo5+QboTqBmlG+piVMHI:VCptt36ttt9tt36tttWglYiiVX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af3ad2f803d116efc57e733c193b3090_JaffaCakes118
Files
-
af3ad2f803d116efc57e733c193b3090_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
y�=�i�]� Size: 476KB - Virtual size: 476KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��9�z'~� Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE