Static task
static1
Behavioral task
behavioral1
Sample
0af81891c111f45ff3fac27cc84e4902_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0af81891c111f45ff3fac27cc84e4902_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0af81891c111f45ff3fac27cc84e4902_JaffaCakes118
-
Size
4KB
-
MD5
0af81891c111f45ff3fac27cc84e4902
-
SHA1
e7d3570e7b74d8aa49680691ce7f5f9de99c16ce
-
SHA256
a00ce3df2eeb68d30f3d0b1f58a80fd65eaf8f5bb751fd99a16f4ea8043dcbc7
-
SHA512
1e3900849cd7792b8144870f3934b0a37af9120b2f01ae3ed2e0035ccf68009b13e9dc1539e284689d53113eb93e6e7acbf73b803d1886a5640b314ed78a3796
-
SSDEEP
48:6+3Lxvt+Pqzry5PnUpB/S1cYzr66NaYJiSolIKEVB1BtsehEW2QGI6ctbcSen/T0:/3Lxl+PqzO/9W6R3LT2ojSUOogORJP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0af81891c111f45ff3fac27cc84e4902_JaffaCakes118
Files
-
0af81891c111f45ff3fac27cc84e4902_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
REG Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PATCHER Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODED: Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PB Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ