Static task
static1
Behavioral task
behavioral1
Sample
ae98a18623e04c9b80ecd7dfd489a544_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ae98a18623e04c9b80ecd7dfd489a544_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae98a18623e04c9b80ecd7dfd489a544_JaffaCakes118
-
Size
546KB
-
MD5
ae98a18623e04c9b80ecd7dfd489a544
-
SHA1
0876c5b0f2795ea364eb83785a634277488ed45b
-
SHA256
4d9d95ecc79743ca6adef937fd520ab6cd8bf45d3bd0e21a01cb2e9ea3c24230
-
SHA512
ed5e53f86b7331c23cd4f75faa23304814a37788118aca5d9248cd9325f68c2c3ef41b2fec1ca4fa9c2ac5a173a59f2df6c712c49f2bef64ba044684db3004d3
-
SSDEEP
12288:/GLEI1OCLmdk4rDKkDrv+KUxYvfB0jSjeOlBScToXrE:+LEjCLmq4rPvGxkJ7jrfYo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae98a18623e04c9b80ecd7dfd489a544_JaffaCakes118
Files
-
ae98a18623e04c9b80ecd7dfd489a544_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.nos Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ