Static task
static1
Behavioral task
behavioral1
Sample
ace9ececff54affc58c4b5d144c8af47_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ace9ececff54affc58c4b5d144c8af47_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ace9ececff54affc58c4b5d144c8af47_JaffaCakes118
-
Size
119KB
-
MD5
ace9ececff54affc58c4b5d144c8af47
-
SHA1
def1e0aab3673f1267f80cfbf77eeb3b29174706
-
SHA256
aa80d0a54295d64eb079819e6ac60d0a0fd55c7aee425992f32ce8caaa29bd13
-
SHA512
b5b50755e1fa1eaa2fbea669f6203609715f862992ccc2778061e03667a55fd7e92038c9e80f8403a13e69e23ad6fa4a30a571b83107eb5148f347d0ec70fb3e
-
SSDEEP
3072:Lf2NJlrelZSlwHvmTKcfhjFtyot72VczMCXQaNo:KJlqluwmG+5ootS6X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ace9ececff54affc58c4b5d144c8af47_JaffaCakes118
Files
-
ace9ececff54affc58c4b5d144c8af47_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
pfohox0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pfohox1 Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pfohox2 Size: 521B - Virtual size: 966B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE