Static task
static1
Behavioral task
behavioral1
Sample
aad13a0e3413918d696ce18876428a2a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
aad13a0e3413918d696ce18876428a2a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aad13a0e3413918d696ce18876428a2a_JaffaCakes118
-
Size
720KB
-
MD5
aad13a0e3413918d696ce18876428a2a
-
SHA1
48029279eece7972dd9d16f53f69f9957068181a
-
SHA256
ff5e9fe775f739f8108b55f9706221d2f3f659a83c13398c483407da8f3877a3
-
SHA512
47e781c23de97aed6f39cf960230dbd711c7e32518387cd9fe21a990f0176c07e17f3634812b2f3b5c4de28f755b6fc62926dd352aceaf292db15822b9d70dee
-
SSDEEP
12288:K2AVKnsC5Gjrs5tixH9nQNDxAOMF9r04lvvAEy/6F3Z4mxxGHm7ZpAz1kLgk1L2U:4Knss5ULnQ3DMF9r0cvvAEyiQmXGHmFD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aad13a0e3413918d696ce18876428a2a_JaffaCakes118
Files
-
aad13a0e3413918d696ce18876428a2a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 347KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 351KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE