Static task
static1
Behavioral task
behavioral1
Sample
aa973c2b3ea740d5f99618c593e8892c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa973c2b3ea740d5f99618c593e8892c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa973c2b3ea740d5f99618c593e8892c_JaffaCakes118
-
Size
29KB
-
MD5
aa973c2b3ea740d5f99618c593e8892c
-
SHA1
5cdcddc707641326373c93bcbc727ca0ed87815b
-
SHA256
55bf24325685960c601694a41b538e39b73b883d2dcb391d078aad35f8530252
-
SHA512
41b8db9d19ee3cdd60c3bb6ae42ba9825fcf13e8247c81e0c8415c26a3b5ccf70d409634acd8dd149c840943e6b609c796d25b8ca556f68b4191b0cea7b00b71
-
SSDEEP
768:wc8tQsyJr7B3x8YUickR7jnbQ6thdo8bbGrv:S+R3OYUqRA62uCrv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa973c2b3ea740d5f99618c593e8892c_JaffaCakes118
Files
-
aa973c2b3ea740d5f99618c593e8892c_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.8tPIH Size: 21KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UIZqcn Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bGr1a Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE