Static task
static1
Behavioral task
behavioral1
Sample
aa9c0b98030d621252144ff6b6c16365_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa9c0b98030d621252144ff6b6c16365_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa9c0b98030d621252144ff6b6c16365_JaffaCakes118
-
Size
313KB
-
MD5
aa9c0b98030d621252144ff6b6c16365
-
SHA1
006e50aa0b300d7eaf8f96ffc1c8580bd287e27c
-
SHA256
17673a34e8c65404df6634f7841afa16f7519fced8f5b153abdc0fadc1c3db7f
-
SHA512
c17177bb21022d08eade911635e27d47af41600a36061b05f304d231e7bc4547b9089ad855ab753f2a21e68640fd5ac1af0d86ef0ed6623aee09005fc50366fd
-
SSDEEP
6144:EDLCrImD0JcTErAv1/5nPdcd56rT5nsvZ+2MXu/G6OCyZvsiziX6FRS:EmDzTbvzud5eFC3uu/cCyJsi7S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa9c0b98030d621252144ff6b6c16365_JaffaCakes118
Files
-
aa9c0b98030d621252144ff6b6c16365_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 451KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.delete Size: 512B - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 294KB - Virtual size: 309KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo2 Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ