Static task
static1
Behavioral task
behavioral1
Sample
aa94c6745bb9de7fd4aa5d33f07e876c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa94c6745bb9de7fd4aa5d33f07e876c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa94c6745bb9de7fd4aa5d33f07e876c_JaffaCakes118
-
Size
127KB
-
MD5
aa94c6745bb9de7fd4aa5d33f07e876c
-
SHA1
463fd2c92485961d1cb5f9578f35bf8ccf34bd56
-
SHA256
50ae5994e91ae89ecabf0693b67e1fc4f9bc7eb114eadfa8c1c4a8dade59c09e
-
SHA512
7d0a247b0af14b7eeeb5dcf02984b8567dd00aa27bf349e9bacb0d34f4e63ad90e12e293f262f448691c18065624ea14b76054304c9fb54ad601d4d5c10d5edb
-
SSDEEP
3072:D8YNLGm5gIrJHRnDjsA6FdHzLpkfrskJQJqOgK:QeH9o7dTL5kCJH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa94c6745bb9de7fd4aa5d33f07e876c_JaffaCakes118
Files
-
aa94c6745bb9de7fd4aa5d33f07e876c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
clfh8 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
24r Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zuz8qjv5 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE