Static task
static1
Behavioral task
behavioral1
Sample
aa0d68a0e10a1246c7b535ab5a37d812_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa0d68a0e10a1246c7b535ab5a37d812_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa0d68a0e10a1246c7b535ab5a37d812_JaffaCakes118
-
Size
16KB
-
MD5
aa0d68a0e10a1246c7b535ab5a37d812
-
SHA1
5b7cf374b6fe9859001e231cff94665becaf2bee
-
SHA256
e00c0f9dfd9af390d708d22e0b70752e235e38091b36dfcdd34a2b4ce52de54b
-
SHA512
9cba5f566ebb0e0cafd83b2383156491a80071b126736a692089e0dff4655a3cfd051d75c9bde648717f7ead00c04f8d8570e1f8e6ed804d3433ef007a40b983
-
SSDEEP
48:yegiad/N1fFj7hiDyCl+xaCJ0gM/3DltuMbnvgFwR0EfK2W6olu36/2oTVhT:LgZ/N5pibsxhVU3PueUEi2W6DqOsv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa0d68a0e10a1246c7b535ab5a37d812_JaffaCakes118
Files
-
aa0d68a0e10a1246c7b535ab5a37d812_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 768B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE