Static task
static1
Behavioral task
behavioral1
Sample
ace6b225acf3f5dc3fe1a545e64a5595_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ace6b225acf3f5dc3fe1a545e64a5595_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ace6b225acf3f5dc3fe1a545e64a5595_JaffaCakes118
-
Size
47KB
-
MD5
ace6b225acf3f5dc3fe1a545e64a5595
-
SHA1
f6c29b229fa280404d4305b90e660148f9c39e3c
-
SHA256
332027c010aacbde44fceecc832d9ffdda358c1f1933f2919acf0aef0d06e7e5
-
SHA512
307814a4229e14a15fd7e2880ff777dc1b473b762a65f0cb459c2284beb912cbb2bdaa21e884eb86023b824e63e378a2672889024981405dd9b549b1a400d758
-
SSDEEP
768:gnzQRtEFpZ+iZysZ5H90iz2ftO4BX0milEaxzPbq3AEY8rOpXY2DGK0Nt:wzQRtEF7Ny2Zg4QNaxzjqQqrOpI2qLz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ace6b225acf3f5dc3fe1a545e64a5595_JaffaCakes118
Files
-
ace6b225acf3f5dc3fe1a545e64a5595_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
udl0.qks Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
01weu0bf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ