Static task
static1
Behavioral task
behavioral1
Sample
ae93b42bd3f5ec7c31e78edc69c937fb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ae93b42bd3f5ec7c31e78edc69c937fb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae93b42bd3f5ec7c31e78edc69c937fb_JaffaCakes118
-
Size
457KB
-
MD5
ae93b42bd3f5ec7c31e78edc69c937fb
-
SHA1
4eeb77ecee03dbcbe7944d509060a7ec22319485
-
SHA256
92bd06e51ea38a32161405cf92cda1946539263461efda2d1919ee98ebc83e22
-
SHA512
baca0dc6aaab7ca964eab273ecdc54ca358ed2a56f0482860a05d36160ba2562035d95cdd7774024217f945cbbc976855e32da86a883988b07ee857af407951e
-
SSDEEP
6144:uWlMpTJSWlMpTJG+T+5R3ImN/ppCkDX3FbpVWwW53Ho88g06Uswr9bCUQ2TkpDzy:pM/VM/oZpIkrJX/uHoHgo9OUQLo9J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae93b42bd3f5ec7c31e78edc69c937fb_JaffaCakes118
Files
-
ae93b42bd3f5ec7c31e78edc69c937fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1.0MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ