Static task
static1
Behavioral task
behavioral1
Sample
afe857e68836c3971a562b9ac0883dd7_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
afe857e68836c3971a562b9ac0883dd7_JaffaCakes118
-
Size
696KB
-
MD5
afe857e68836c3971a562b9ac0883dd7
-
SHA1
82c9936b32ff2760fec6ff27f3bef4103b03c08b
-
SHA256
f55a40b8467d541f69606a27bfa684e6c7f84b1999ec4c1b83b98ff00042a37a
-
SHA512
e297bda6b4b4772b96ca1428508511af376ea0f04f5b55dc0446666a1093527f30b1a0f43d0da9e6da82c45b9ac9a253592ff8019be818613012782700d94a20
-
SSDEEP
12288:KlVDnqw33lCT1d1JY+dozcqQJT8X3xMNtBx7CQaiVFVpXx+2Zq6RMTAeBJWWF1sT:EtzH4t+oDRJTcMzBoQhF3xZ06R+JXkI8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afe857e68836c3971a562b9ac0883dd7_JaffaCakes118
Files
-
afe857e68836c3971a562b9ac0883dd7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 151KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE