Static task
static1
Behavioral task
behavioral1
Sample
aea7339327ba43a7ddb11d7e19348093_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aea7339327ba43a7ddb11d7e19348093_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aea7339327ba43a7ddb11d7e19348093_JaffaCakes118
-
Size
560KB
-
MD5
aea7339327ba43a7ddb11d7e19348093
-
SHA1
e422f86f7f3a73973a41472f312a56920927bafb
-
SHA256
64147b3e7e93e1e41de6f820ac41ea501ef88da542ee7387c4419ae3c2a3fa77
-
SHA512
7d42a6411bd095ff335471f92889619b10faa292db97fbbdf2f561e0cdf4a48b2203745ce183d42b8e235041d1dbd04abe71ec94690052b7892bd56163e25847
-
SSDEEP
12288:dJMze7pFh9VYbaPPH0B/O6FEjFM/cCIvBZYcPz:fWer7VJnIEFM/cCIvByc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aea7339327ba43a7ddb11d7e19348093_JaffaCakes118
Files
-
aea7339327ba43a7ddb11d7e19348093_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 450KB - Virtual size: 450KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size:
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size:
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ