Static task
static1
Behavioral task
behavioral1
Sample
00aa4d09fd48fc370c062381b3b26e12_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00aa4d09fd48fc370c062381b3b26e12_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Errors
General
-
Target
00aa4d09fd48fc370c062381b3b26e12_JaffaCakes118
-
Size
60KB
-
MD5
00aa4d09fd48fc370c062381b3b26e12
-
SHA1
1e2787ddc2120ad7b41d3f8686e6cb83e869cd1e
-
SHA256
3ba550f6cdebfd23bab6a68d0cf847e20906a8dbef7db93d785f34ada4abaa9f
-
SHA512
7e6fcc963e04b79e78a34f479ab38638c67e572d073ae5d4d735cbec6e678f13356120372860da56db9ffd5af526da7abf5d6360d4f9fe8931f94086c7e2aedc
-
SSDEEP
1536:duYkyyl8EGPAkv+PkUIaysmp9N2lQRQd13zdvRTqEy5:QHoPAk/aLyDxA3zdvg5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00aa4d09fd48fc370c062381b3b26e12_JaffaCakes118
Files
-
00aa4d09fd48fc370c062381b3b26e12_JaffaCakes118.exe windows:6 windows x86 arch:x86
009889c73bd2e55113bf6dfa5f395e0d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsProcessorFeaturePresent
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ