Static task
static1
Behavioral task
behavioral1
Sample
ae143c364757f0f68f831e445d7dce22_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ae143c364757f0f68f831e445d7dce22_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae143c364757f0f68f831e445d7dce22_JaffaCakes118
-
Size
15KB
-
MD5
ae143c364757f0f68f831e445d7dce22
-
SHA1
899f6bb6549d463c9fc4b095c0f75d129f559ecc
-
SHA256
b8aa5b0de34b12c34b0e5e2f5909dc25203b8381f0ac27f9c41db20ba9ebde76
-
SHA512
c693ac3a1386973d90d2e30e1246ee856dec0044b98424abc00c134b69e5491649d441a9e05ff1c91a96f10559fe464b38ad7794626755cecff09b3eeb564ca6
-
SSDEEP
384:r6KM7KLyhOQSdGT5G/3RfrAI8dw5BDNgGflB465F:e37KCSdo5GVUI8aDN7tB4A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae143c364757f0f68f831e445d7dce22_JaffaCakes118
Files
-
ae143c364757f0f68f831e445d7dce22_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
KGP Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KGP Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KGP Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KGP Size: 768B - Virtual size: 768B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE