Static task
static1
Behavioral task
behavioral1
Sample
ae0ff325bb61a7c990cbe14d17344d72_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ae0ff325bb61a7c990cbe14d17344d72_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae0ff325bb61a7c990cbe14d17344d72_JaffaCakes118
-
Size
101KB
-
MD5
ae0ff325bb61a7c990cbe14d17344d72
-
SHA1
8cf45dfa09a5ab82048e28dccb817f8abad28f02
-
SHA256
dbfe080486afb9075203b018f350755b90aa77b13b25e2936230f9dda92165fb
-
SHA512
ec3cd2e9a5f2dde68179f29dd6701499aef9ecabd092e06bd5b3338a92f28faa9a6e27241ab0fe897e264e6915f21582b072c9c3234c8a1ec93fd2fe302ba65e
-
SSDEEP
1536:u3LdEfdp6nP48y9WKVJbtXrd12tCkNhzxpLt2DFXEOIp4SO0SKM:AREfP6PbzwJXpgYStbS5BZSPM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae0ff325bb61a7c990cbe14d17344d72_JaffaCakes118
Files
-
ae0ff325bb61a7c990cbe14d17344d72_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ