Static task
static1
Behavioral task
behavioral1
Sample
af8cb3889f45c187199c69e44386c5ee_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af8cb3889f45c187199c69e44386c5ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af8cb3889f45c187199c69e44386c5ee_JaffaCakes118
-
Size
648KB
-
MD5
af8cb3889f45c187199c69e44386c5ee
-
SHA1
0a1faf9ae4f67b3a0768de49863aef258b0c68d7
-
SHA256
e36607afcc89795ab06dc43186724b59e3162b80e80c617500856b43a20a230e
-
SHA512
07b4391e17faf6b9adf39adf7dc697dea051e8e8d4bbff4d665a1d3fe3d8b26a66a70cc7e3cbd2736468f0b34fbdaa136bd5adb02c75826d763637062a3110d3
-
SSDEEP
12288:y7pN55XM6liqDfD7Ss1qOcMKg6QiP6h5AKdxExAvvVPHOqEn+mJNV22QLImF:Yr5G67OsgOcg5iSnvjvv9HJQ+c9mF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af8cb3889f45c187199c69e44386c5ee_JaffaCakes118
Files
-
af8cb3889f45c187199c69e44386c5ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 411KB - Virtual size: 411KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ