Static task
static1
Behavioral task
behavioral1
Sample
ae0b2a243d6f5f44cfaf5c9327d544d9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ae0b2a243d6f5f44cfaf5c9327d544d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae0b2a243d6f5f44cfaf5c9327d544d9_JaffaCakes118
-
Size
59KB
-
MD5
ae0b2a243d6f5f44cfaf5c9327d544d9
-
SHA1
5bb55c7c41d79ad605e0374236051f28abdddeda
-
SHA256
2d978f6034195e42ef80c5b76587ba34b08ed3f3e75dca17d4c0e250135233be
-
SHA512
b804aa6a3ec08ea6142b98962ba9d3bfadecbb0c8f6dd2d2f7e4dc54c4d969e3b3050753d82166bb4f18832b33163feb5141f5b9169d947b4654c077c3d2db8f
-
SSDEEP
768:XaZhWTejje4y5M3pyQJUiUnYvi4ZEgkxAwNv5p1eiQ2Fn++H:XHqe4/ybi64EgmX95Xvh0+H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae0b2a243d6f5f44cfaf5c9327d544d9_JaffaCakes118
Files
-
ae0b2a243d6f5f44cfaf5c9327d544d9_JaffaCakes118.exe windows:50551 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
zqyjaaar Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
izarrrzi Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iirrqyra Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
brrararq Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ