Static task
static1
Behavioral task
behavioral1
Sample
aa372ec8c6541d2d1a0dc48590cdfadf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa372ec8c6541d2d1a0dc48590cdfadf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa372ec8c6541d2d1a0dc48590cdfadf_JaffaCakes118
-
Size
181KB
-
MD5
aa372ec8c6541d2d1a0dc48590cdfadf
-
SHA1
90d54f8959d12e228bebcfa082258ae35ff2f7d1
-
SHA256
fd9bc737f6596b26bbe79ede1172fa15279277fec24df158b49200830ca68702
-
SHA512
a9f45c02329f9330b787db0bf321f90bff7c8424342839285f55590b5c30e46343a57535a8748df3e2c2fceeba92e5e796df36dea350c30f606709d3bde55801
-
SSDEEP
3072:TtNOvWz0qreXfEEHqYu8SaWetd5TnR096bJqljU6hjq5WFcEF8/K3C8v5DyIGR3Q:xQy02eXf3KbX7GbB9nkjyEFTCY5xwEPV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa372ec8c6541d2d1a0dc48590cdfadf_JaffaCakes118
Files
-
aa372ec8c6541d2d1a0dc48590cdfadf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE