Static task
static1
Behavioral task
behavioral1
Sample
aa06747015f61f0df3667cd6e51a35ef_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aa06747015f61f0df3667cd6e51a35ef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa06747015f61f0df3667cd6e51a35ef_JaffaCakes118
-
Size
312KB
-
MD5
aa06747015f61f0df3667cd6e51a35ef
-
SHA1
188475b5072667d11fdd9d97fbe14de3665d3ea3
-
SHA256
b960ac31d3734c1a3243c1dacd458de38ddae050b554a5482160ed61ac893f48
-
SHA512
d926d3249e5cd550421c3fe0325744ad91cb73081bf293e337a4e364717080eb554e38544cec8811b4cabe45e1000e1c6182c2527ef371e312f100e4c6c50df8
-
SSDEEP
6144:Tzyj29b+hl3KMyWOnK0EiS9o+Wif/6QWQuYpkGatx8CgmSVbYZBYKt9:TzOjSMNXySqhifi/Mgx8CDMYZBYA9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa06747015f61f0df3667cd6e51a35ef_JaffaCakes118
Files
-
aa06747015f61f0df3667cd6e51a35ef_JaffaCakes118.exe windows:5 windows x86 arch:x86
6282642f892c8275c21f5a9768e35f8c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PeekMessageA
ExitWindowsEx
kernel32
CloseHandle
Sections
.epup Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ytslsd Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wvavah Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ