Static task
static1
Behavioral task
behavioral1
Sample
aa5230e1124d3de2fdfdc917542e8096_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa5230e1124d3de2fdfdc917542e8096_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa5230e1124d3de2fdfdc917542e8096_JaffaCakes118
-
Size
254KB
-
MD5
aa5230e1124d3de2fdfdc917542e8096
-
SHA1
bbb92353f7d98ec17703e92398ece109754a0049
-
SHA256
406358cbd2d4d9d75a829f6e29afed1ab5971905c5370bc1f7d9cc631a1ced3f
-
SHA512
335fd998f9c35da60c0a9cea5a3d45f1dd46bb8c2060b1d03dd0126ed4023cfafd6d1eed8d917c1557e684acef2357ba07bfb84111c0c4e78296fb534beaed61
-
SSDEEP
6144:/zxorEmcTGAdTulF59LooSF/0VqsInWYINgpUggFY:LsFF59L1SF/WqjxpUy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa5230e1124d3de2fdfdc917542e8096_JaffaCakes118
Files
-
aa5230e1124d3de2fdfdc917542e8096_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE