Static task
static1
Behavioral task
behavioral1
Sample
aad9c6f738fc7cd2812211468fb0fedc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aad9c6f738fc7cd2812211468fb0fedc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aad9c6f738fc7cd2812211468fb0fedc_JaffaCakes118
-
Size
11KB
-
MD5
aad9c6f738fc7cd2812211468fb0fedc
-
SHA1
3e2b3a6032a12d5e682452758ead1325db410f08
-
SHA256
3c93ac5a4cb0bc808b50239523d1fc138d85827bd849efdd4965f4f7c39b7c41
-
SHA512
52c505ebfcccb992a073a649e4f90b4305d593519db7029742e7cc43610411687d7ea4ce0e0bed90be5dd61bbbc717bf9fc3fd37f8399d67696c7d5e59924e08
-
SSDEEP
192:uJAReH5MtsrJXAh3ukJyFxsgCiULfZj+lY2de5hF5JykjXIHgouYB27:EARC5MtUAB4Fe2ULfZjiY2+/5JykjXIO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aad9c6f738fc7cd2812211468fb0fedc_JaffaCakes118
Files
-
aad9c6f738fc7cd2812211468fb0fedc_JaffaCakes118.exe windows:4 windows x86 arch:x86
51c4e98e76bd946f81a1a9c26b55ce8b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ord1
Sections
CODE Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FYPMJW8F Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stalin Size: 52B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FCryptor Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ