Static task
static1
Behavioral task
behavioral1
Sample
aa29ef67d1fc0d2de3cf9dd4a0ab6aae_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa29ef67d1fc0d2de3cf9dd4a0ab6aae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa29ef67d1fc0d2de3cf9dd4a0ab6aae_JaffaCakes118
-
Size
94KB
-
MD5
aa29ef67d1fc0d2de3cf9dd4a0ab6aae
-
SHA1
afb42a644252ad44d5152191753f0da8fdc2396a
-
SHA256
ad8a1a0df2b52f4800dc8c82f1120d37ad08269a9c20394a0cde381c54676fff
-
SHA512
70c153a459e19edbfad7c3d1db31d9d73f7cfd97671113d43320248919a3b144716b517887018e6db17b5362c25e05572c8d88d3299a2f78d39897260b30ce04
-
SSDEEP
1536:YJEcZdaFk4w68KLwar9EtwmbBcU8QbRH+vxAGBcXQ3Ph10urmFIy:HcDMk4r19EtPdwvxRBcXQ3ptyFIy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa29ef67d1fc0d2de3cf9dd4a0ab6aae_JaffaCakes118
Files
-
aa29ef67d1fc0d2de3cf9dd4a0ab6aae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 269B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ