Static task
static1
Behavioral task
behavioral1
Sample
aace4cd412ff9b1ebca78cb7f7a8715c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aace4cd412ff9b1ebca78cb7f7a8715c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aace4cd412ff9b1ebca78cb7f7a8715c_JaffaCakes118
-
Size
455KB
-
MD5
aace4cd412ff9b1ebca78cb7f7a8715c
-
SHA1
cdc210cae0dca618013aba08e4385695c94f0662
-
SHA256
65f1601e4d5b817cd704dfb0e550d74a7d3e3b307366d64edd3778b1ac9e772c
-
SHA512
e8aba80a2d804d3ac1ef2f45c29e279d27f9140391d17d324fd61c41597c2c3568599aacd2fb5dd329d6cc8e8a6348a0d94d9e0aaf036d791b1578722bb9a022
-
SSDEEP
12288:1ODoM5N6IXKQF4hyedEIrLskdsea+ZL9GPo6oeCgjSf2VDw:oDFLl613Kkwkmd+ZhGL5+f6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aace4cd412ff9b1ebca78cb7f7a8715c_JaffaCakes118
Files
-
aace4cd412ff9b1ebca78cb7f7a8715c_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 439KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE