Static task
static1
Behavioral task
behavioral1
Sample
aa11e8899afd6c64f872dbe2c42869bc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa11e8899afd6c64f872dbe2c42869bc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa11e8899afd6c64f872dbe2c42869bc_JaffaCakes118
-
Size
148KB
-
MD5
aa11e8899afd6c64f872dbe2c42869bc
-
SHA1
91ce944dd84dceba62dbace3441c19d7d8771d5f
-
SHA256
97893c3918118806b4b35ece81b66b0a7b503833f0a9f4af04aacb2ac9cee1f3
-
SHA512
cf8e84af95ef66fd3a6256223f33945acdad33a37d02d84f133eb7f36bc69df68086c513062d3f654911a0073258d68dbfe4e75ac926a51bfc5d63c8b79f56ba
-
SSDEEP
3072:FAOQ7lfKPfEvx53GIO0AUmN9zJB4pIc4ry4kvANV7T:9GlqEvx5/etBRcqyRAbT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa11e8899afd6c64f872dbe2c42869bc_JaffaCakes118
Files
-
aa11e8899afd6c64f872dbe2c42869bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 209KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE