Static task
static1
Behavioral task
behavioral1
Sample
aefdad496cd6d3edff6d9b364748abcf_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
aefdad496cd6d3edff6d9b364748abcf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aefdad496cd6d3edff6d9b364748abcf_JaffaCakes118
-
Size
642KB
-
MD5
aefdad496cd6d3edff6d9b364748abcf
-
SHA1
d69d09661b63a9ea344ac0bce3a0bbabce8c1d7f
-
SHA256
7c848a60001f1ed5b1c4e187a4ff3fd955667f3b627f708fdf8d5c8c41674066
-
SHA512
407503a7f4304645934e8f22fe6f338e30533c1db23932406955de15132366af035b26f56492aa2fe3a3eb58116d7712bee354a640e7c1f1dde6ab9f7d18a11d
-
SSDEEP
12288:W1JQJglZOqz+qFta3VfLrasLAo8iml91A9OF3Z4mxxhDqVTVOCK:AJQGrOsjwBasLAz91DQmXoVTzK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aefdad496cd6d3edff6d9b364748abcf_JaffaCakes118
Files
-
aefdad496cd6d3edff6d9b364748abcf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 306KB - Virtual size: 908KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 319KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE