Static task
static1
Behavioral task
behavioral1
Sample
afcaf7fa0452ccb06ed8a7661b848d0d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
afcaf7fa0452ccb06ed8a7661b848d0d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
afcaf7fa0452ccb06ed8a7661b848d0d_JaffaCakes118
-
Size
13.1MB
-
MD5
afcaf7fa0452ccb06ed8a7661b848d0d
-
SHA1
6010ee4abb456b7d542926d43ef5c8571fbd0d18
-
SHA256
7e15e48c619e15f9fa036b079dcfd1baf4c23048ab83bee6f5ad1c2996d0707a
-
SHA512
6815e0f506699eb9d8724c47f3871d6c88840943ca4748c0ce7626087af8ff56a28f10ee1f8dfdfe6f4b05d33accb302df0b8ee3f200489701d065e53e3ea1b4
-
SSDEEP
196608:eZIijtRFeEGjYl+kOCpNU8caRf3b40XH+cHl6w2rWWb8dUKu0Iq0EAnaiu9zF:wIiddYW2MVX+m2rZ89IqRUaiO5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afcaf7fa0452ccb06ed8a7661b848d0d_JaffaCakes118
Files
-
afcaf7fa0452ccb06ed8a7661b848d0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.icode Size: 1005B - Virtual size: 12.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.engine Size: - Virtual size: 3.0MB
.entry Size: - Virtual size: 424KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 13.0MB - Virtual size: 13.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE