Static task
static1
Behavioral task
behavioral1
Sample
aa5bfc9e842b468693bf23c342b6ae6d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aa5bfc9e842b468693bf23c342b6ae6d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa5bfc9e842b468693bf23c342b6ae6d_JaffaCakes118
-
Size
56KB
-
MD5
aa5bfc9e842b468693bf23c342b6ae6d
-
SHA1
bc7d203e5d8eaf3ebc17b6ff51f87f3f56b037b6
-
SHA256
2d5dcd4d10b8ea14ab4a3358fedeef840e7f908601fc4dab8748712eb9d275da
-
SHA512
cf40448212573b90b2f2f53422492581611e4a8b3aabda80016ee9c56638e9af0b58f5d0721f7f903ab20b89daca9c341ab381adf98871c55ebe9f7fb89eef5b
-
SSDEEP
768:KB0YNjUZo2AoM+Xtu4dSJ7EOHXimbiqUkh8tkTGAzBgp37foZCii4842wILhRw9n:K0W2m+92fJbiyu8D8ToZW4blILe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa5bfc9e842b468693bf23c342b6ae6d_JaffaCakes118
Files
-
aa5bfc9e842b468693bf23c342b6ae6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 406KB - Virtual size: 406KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ