Static task
static1
Behavioral task
behavioral1
Sample
aae6a7814a5cd7be5352b4a0592b7fe9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aae6a7814a5cd7be5352b4a0592b7fe9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aae6a7814a5cd7be5352b4a0592b7fe9_JaffaCakes118
-
Size
374KB
-
MD5
aae6a7814a5cd7be5352b4a0592b7fe9
-
SHA1
4caecbfce1eb6f1c669fa596ba1586b7b5d81856
-
SHA256
b7d20fc1b28c7f9b8aa60b13b96320890df3072bcf2f0c0a8fed33965accbed9
-
SHA512
34ef0bbe6a8827d7ed51835d7ef37737f6ea46ee5259f052efa9f30558c7725f1cc55d8d66734fda5ee5bd104251797067d3b820863c55a1f0b3dd00140af0eb
-
SSDEEP
6144:98s5Gjv2UaymF2idZecnl20lHRxp3gP8Wn/UOHpfhyVvRSCQtISBDf0lJvd:98rT2UQF3Z4mxxm8Wnpp28C4BDod
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aae6a7814a5cd7be5352b4a0592b7fe9_JaffaCakes118
Files
-
aae6a7814a5cd7be5352b4a0592b7fe9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 338KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE