Static task
static1
Behavioral task
behavioral1
Sample
afb0c304647f70b42f3ddad028833533_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
afb0c304647f70b42f3ddad028833533_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
afb0c304647f70b42f3ddad028833533_JaffaCakes118
-
Size
111KB
-
MD5
afb0c304647f70b42f3ddad028833533
-
SHA1
dc6a6bc735eaa17e54bc2263f2e5c4a2818e8d88
-
SHA256
509527a9ec4b73d88b8d9bad9991597ab81230cf1d4e31186521eb9ef546b772
-
SHA512
9470f0f16ee4281c866053b019cfc76db4f29146932f8eb29b498e7477bb323d9914235331d39fc9a7d48a44606c98d378fd9ae40be512d77479da8e7d0923ca
-
SSDEEP
1536:zmBWfqR0nPfwRbvTCeOsr+BtBh+fCNl3GbClogDreSKy6fEGzrjoop/mons:CYRHQr+6+BtBhu5cr3Ky6sGzrjo1on
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afb0c304647f70b42f3ddad028833533_JaffaCakes118
Files
-
afb0c304647f70b42f3ddad028833533_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yq Size: 3KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uiib4th Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
og Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE