Static task
static1
Behavioral task
behavioral1
Sample
aaf95afe2f274e5ee96c32b20aac7334_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aaf95afe2f274e5ee96c32b20aac7334_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aaf95afe2f274e5ee96c32b20aac7334_JaffaCakes118
-
Size
8KB
-
MD5
aaf95afe2f274e5ee96c32b20aac7334
-
SHA1
66fbc4cd90899a0b1bdfb98e57e91f8f624ae1c0
-
SHA256
ab10a1cfe912df0cd0fa6ecbbe7d4c67e8f0b94768785d71238e978f6376d77f
-
SHA512
4f0342258877432db22cdb26022286e995f5917e1cca2b2f9ec7ca1c78ff427e5eaf445834a5211241e81520a65aa1c9651bcb56c0744a56b208cd610c9b7dc6
-
SSDEEP
48:OEP8D5Z71I8m1TrLkEItv/A1/3f3zf38jDkOB:nPiZ7etQ9CPrsHkO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaf95afe2f274e5ee96c32b20aac7334_JaffaCakes118
Files
-
aaf95afe2f274e5ee96c32b20aac7334_JaffaCakes118.exe windows:1 windows x86 arch:x86
9951ea482cdf88d83ed64c8866836e90
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
SLEEP
EXITPROCESS
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ