Static task
static1
Behavioral task
behavioral1
Sample
aa68a521d5fcec5d24933b26162e9275JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aa68a521d5fcec5d24933b26162e9275JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa68a521d5fcec5d24933b26162e9275JaffaCakes118
-
Size
1.0MB
-
MD5
aa68a521d5fcec5d24933b26162e9275
-
SHA1
8168da6d2a55050e45a6997bf49ce6511a67be59
-
SHA256
0c42facd22e0df812a49d7e64bff9fb369542cd3401b297103538f45027f92d8
-
SHA512
bb96450576086cc3cbb55cbc98e858a9e620885baedc80f2c637b2a90034104c32b2e89db60c6d4f11a0b4cd7d722fc2b4f754906f6a1e263ba5c0392a093e64
-
SSDEEP
24576:M3K+yB5tzZscm1zSnZBtn+sS4+alu1HsiFxKK:T1bzk1zsZBBSVgu1HX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa68a521d5fcec5d24933b26162e9275JaffaCakes118
Files
-
aa68a521d5fcec5d24933b26162e9275JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 993KB - Virtual size: 993KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ