Static task
static1
Behavioral task
behavioral1
Sample
af810472000d040e5d398c78c70c581d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
af810472000d040e5d398c78c70c581d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af810472000d040e5d398c78c70c581d_JaffaCakes118
-
Size
60KB
-
MD5
af810472000d040e5d398c78c70c581d
-
SHA1
6fdfab2376351735e1d1140d69744e3cc3bfc442
-
SHA256
c7d40120e0ad237b54d3909af784d5ef8b6a7480917f2e349e29e09d14229217
-
SHA512
b53e3d433b7a183dc3615dc08861a6d8bd131344c91602f42db715b95dc5650637b90263d145edaadf1065058a0aa506e18fc2391d36742c6cce33873dacdca6
-
SSDEEP
1536:FSHtYAekWgWyivWJp+XBO/hGHsauplTVexLqiR9:FSHtYAekWgWycw/hGH38lTVexLn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af810472000d040e5d398c78c70c581d_JaffaCakes118
Files
-
af810472000d040e5d398c78c70c581d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ