Static task
static1
Behavioral task
behavioral1
Sample
00aaa5a081a631d52964c88f988bf67a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00aaa5a081a631d52964c88f988bf67a_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
00aaa5a081a631d52964c88f988bf67a_JaffaCakes118
-
Size
5.4MB
-
MD5
00aaa5a081a631d52964c88f988bf67a
-
SHA1
9424da9f6dc9c2c886d4cf5be12b65a69d64ac04
-
SHA256
1b7303e97c8dc2c00a70c68864724f151effe7cce420469ee9ff16727c0592e0
-
SHA512
589baa0fb5f7b35e2cbea3981d833c68116992f570fdd9b7e251abaaf3cf227cbfac0fa0ccdca54c6e08a99b019b955ac5424c2ca00ddfb69d9ea7f969a7e9ab
-
SSDEEP
98304:mIBNTKNrJGIm2a1IY8CAXbs+Zk/4v3HpbudO6m9GYYcW:fBhKNrEIm2a1IzRXbs+Zw4v3Hpo3GGYM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00aaa5a081a631d52964c88f988bf67a_JaffaCakes118
Files
-
00aaa5a081a631d52964c88f988bf67a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 13.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE