Static task
static1
Behavioral task
behavioral1
Sample
aa65a74f878465956c78f24ed992afdc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa65a74f878465956c78f24ed992afdc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa65a74f878465956c78f24ed992afdc_JaffaCakes118
-
Size
152KB
-
MD5
aa65a74f878465956c78f24ed992afdc
-
SHA1
f2a2a7b95b7c02357ddbce93734f036ae6d7e24d
-
SHA256
13efa1b49089e5f1f1b86f573a1a2b210d39b49e50f9cf54ef0073ef0b9c1c21
-
SHA512
aa67da276acf2f01375c9301501e400a98f7cc63d5395c4e5b51d0f3612e4c1f3344221951bca3c792f163a0f45cbc1a4b90fcfe6e70ecd4123a7847785b7d90
-
SSDEEP
3072:IhlsN9PEJtTPydAuAaWIwYYlVHumq9bpknjgqG6sLyCuwEFOx/SsiV8yOGTD:I0PEtTPkAuAfjlJuj3QjgJ6snJZ/RjQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa65a74f878465956c78f24ed992afdc_JaffaCakes118
Files
-
aa65a74f878465956c78f24ed992afdc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 284KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 640KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ