Static task
static1
Behavioral task
behavioral1
Sample
aaac6c3f2caaa7688d34867a6d44e64c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aaac6c3f2caaa7688d34867a6d44e64c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aaac6c3f2caaa7688d34867a6d44e64c_JaffaCakes118
-
Size
78KB
-
MD5
aaac6c3f2caaa7688d34867a6d44e64c
-
SHA1
4619e72254354ce4d455d93a376fcf9773ef7912
-
SHA256
21dfa65b96eae3b08c724681b42ef7366cdbf453e5e21c8b862115c8d8eea710
-
SHA512
71c7e501460bb3ef27295d9a9c5527f8d8ead2d7436f97b8e1c0da36215c6b5c8ac5cc24959446f88a55cdd6ba1804bbb2ca6ef3cec4050c774aa15cea52d83d
-
SSDEEP
1536:yXPtEPd9ZV3qeID3zBm5pLQvt9B+73STPaqgstxsnLGvlxWJEhnwh:y/tKdXV6X++vB+7SPTgstKn23WJEh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaac6c3f2caaa7688d34867a6d44e64c_JaffaCakes118
Files
-
aaac6c3f2caaa7688d34867a6d44e64c_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
..#.. Size: 77KB - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
...... Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE