Static task
static1
Behavioral task
behavioral1
Sample
aae6241ed2eeb6e28c4b7d9f421a977d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aae6241ed2eeb6e28c4b7d9f421a977d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aae6241ed2eeb6e28c4b7d9f421a977d_JaffaCakes118
-
Size
856KB
-
MD5
aae6241ed2eeb6e28c4b7d9f421a977d
-
SHA1
9496c642d0866f75a8806e6f518d74d1e25e9f65
-
SHA256
d0a067faad83a2a6b263036096d683003fedbefede1132f5d5b798fdf899d3d8
-
SHA512
6b9537acba10245e6a2eaa4a41e4903d8d3095511b2fca2023febd563ac8bff974cb25e46567ea4be61463d9c7f9775f5c31080eb469a001fac845a5be8777c7
-
SSDEEP
12288:J9Fjn3ZE+GCNcJZzbjmf5Z2m5SlWpmvWTJfnwkArmlCbWh67eu:RT3ZYJZzbahMlWVTJ4kfCSo7H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aae6241ed2eeb6e28c4b7d9f421a977d_JaffaCakes118
Files
-
aae6241ed2eeb6e28c4b7d9f421a977d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 369KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.heb Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE