Static task
static1
Behavioral task
behavioral1
Sample
aeb4e143abbdd859232b7edc6997bdd1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aeb4e143abbdd859232b7edc6997bdd1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aeb4e143abbdd859232b7edc6997bdd1_JaffaCakes118
-
Size
78KB
-
MD5
aeb4e143abbdd859232b7edc6997bdd1
-
SHA1
f229b2805a2918ef5fdc4ccb49ab5e9553a7ea6d
-
SHA256
58378c5d378da9b11be33416d69049a89c3e75c5f5e57c4b85dbc10ddef04335
-
SHA512
5edc333cb56224d93b79d0bc3588cc3c350d49cacb8ae499c3852e95487bf5bcd08b0127dea3bc8cba809e6e42c9813e15a530ae4f34ab5cd8acbaa0ee53e508
-
SSDEEP
1536:NsmHHUsX4BMKHA+ZsOVnCWPMTixxVXSIDcL4xIFEHrk606Iuk:TUsovr/hsL4xIFEHrkMk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aeb4e143abbdd859232b7edc6997bdd1_JaffaCakes118
Files
-
aeb4e143abbdd859232b7edc6997bdd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ