Static task
static1
Behavioral task
behavioral1
Sample
af3e444ce4f58b7fb620ed6c2b6c43c4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
af3e444ce4f58b7fb620ed6c2b6c43c4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af3e444ce4f58b7fb620ed6c2b6c43c4_JaffaCakes118
-
Size
208KB
-
MD5
af3e444ce4f58b7fb620ed6c2b6c43c4
-
SHA1
bd6ace9a46612c1dee2039d80ffbdc670625deda
-
SHA256
76332b1864544eecdb79bd3a87b33de3facad62f602f74aafde5c698226df5ff
-
SHA512
9c8eb313b716e573b8576f72178efa8b8ebd4a6aeb42ba0e9606c3ed0b5e322726faa83ec03cfc0875bfb3342be5721168388033676e68bba19aa0a6a705e0b4
-
SSDEEP
3072:P//u65WaVeWpTSu0LoJRiD6w3VbMgC9UWAbDYtOs02K0w0a1nFTKhae7v07:P//u0WaguTS/WRiD6w3W+u6F0KFOD7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af3e444ce4f58b7fb620ed6c2b6c43c4_JaffaCakes118
Files
-
af3e444ce4f58b7fb620ed6c2b6c43c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ