Static task
static1
Behavioral task
behavioral1
Sample
af6c267fde4a99cfe8e659ddad29d1b0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
af6c267fde4a99cfe8e659ddad29d1b0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af6c267fde4a99cfe8e659ddad29d1b0_JaffaCakes118
-
Size
8KB
-
MD5
af6c267fde4a99cfe8e659ddad29d1b0
-
SHA1
c26ac7f3918c69f2bce19030368992b66120ad04
-
SHA256
c18d42718cf45c6ff430b6bb3ccdc30ddc60aab4a28f41b37418b96cade9fec3
-
SHA512
278bca71a4bb4088280c958127cd4e42af7075f58ee6e4e8988453d7c3755def0e61f3f4ca19abc2f84de2ea0af3b7e5cd875b0cd3b77e30ef40753484499bea
-
SSDEEP
192:iEV692eO3OIe8mA4ZtD9cZhvGU/t0rSqFZKw+HJ:1W27eIbmAY9KhD/te+J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af6c267fde4a99cfe8e659ddad29d1b0_JaffaCakes118
Files
-
af6c267fde4a99cfe8e659ddad29d1b0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 421B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ