Static task
static1
Behavioral task
behavioral1
Sample
aef862bd1ebb2765bc65a0df80b0b1f0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aef862bd1ebb2765bc65a0df80b0b1f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aef862bd1ebb2765bc65a0df80b0b1f0_JaffaCakes118
-
Size
140KB
-
MD5
aef862bd1ebb2765bc65a0df80b0b1f0
-
SHA1
755abe09dd0dacf0b35c69f10611bd2e522c0d7d
-
SHA256
d7bc612918412bc7605468e69960cdc38ed10725c7dbfb64ec94a7cef65bff89
-
SHA512
5a308d8caa42caeeed9f86f8870071228aca5726dfc98b7731b6bb8580ccaffb7b9d9f8153f79393c33ee82102e4eff84808ee89457ad9461a80e184f21c230b
-
SSDEEP
3072:anzaDyR2bff00XqJbMTmnDDGzgIQlN+znO4OWMYcy/T1dEri1TS5:caDysbfc0Xub7nDDvIQKznSFFAT1++1A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aef862bd1ebb2765bc65a0df80b0b1f0_JaffaCakes118
Files
-
aef862bd1ebb2765bc65a0df80b0b1f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.itext Size: 5KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 530KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 515B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ