Static task
static1
Behavioral task
behavioral1
Sample
aaeeef0c9b9c3e3a6248c7e8869868fb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aaeeef0c9b9c3e3a6248c7e8869868fb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aaeeef0c9b9c3e3a6248c7e8869868fb_JaffaCakes118
-
Size
48KB
-
MD5
aaeeef0c9b9c3e3a6248c7e8869868fb
-
SHA1
60159e0ba9df651826b93773dc61ab93aed0cb1b
-
SHA256
d883f2ee714e9972dcd6c0f4192ef43810562996e32a984bdc2be7f19803e7f0
-
SHA512
a0d793d31efa32412237a012eb61534700f85be24119023a1b5f0bde23dddacab27e1d91113f3bb18477a117d4b0da10cd5a8b13b80c6aeba439e4f4aafb211b
-
SSDEEP
768:X4eV3s/M0XdORO4sO5HOiZKCQSPy0SY8ah+wolZIVzT:lxx0XYrHDKCPy0SY8MoZIVzT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaeeef0c9b9c3e3a6248c7e8869868fb_JaffaCakes118
Files
-
aaeeef0c9b9c3e3a6248c7e8869868fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ