Static task
static1
Behavioral task
behavioral1
Sample
aed1cedf1d7b2d3c6c84e4029b3299b2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aed1cedf1d7b2d3c6c84e4029b3299b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aed1cedf1d7b2d3c6c84e4029b3299b2_JaffaCakes118
-
Size
676KB
-
MD5
aed1cedf1d7b2d3c6c84e4029b3299b2
-
SHA1
415909701475f20c3ee1e405ee48b8858328d8cd
-
SHA256
1182a74b3bcbdbdc673945ae2f28654f0ee52b03afef8d88e599e650ed41bc65
-
SHA512
fa55a1d18335fae162ca653b4ea4721f2982a09dcc87531ed1173795fc21e0f6be9a1b891e15a59cec281d182bd4a24780ba8cecb75f6d20b9da26e4e735f4a9
-
SSDEEP
6144:z+R5eKQXsQlpMuCsXZg/noUygTzbr5svhQQxImXlAahRQdOOdFW9WQnZd8RT9f4V:a8btCo0FsoQRzQdOOdY45gviX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aed1cedf1d7b2d3c6c84e4029b3299b2_JaffaCakes118
Files
-
aed1cedf1d7b2d3c6c84e4029b3299b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
rbdz Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rbdz Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rbdz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rbdz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE