Static task
static1
Behavioral task
behavioral1
Sample
aedf3872e7da758981779437ff00a223_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aedf3872e7da758981779437ff00a223_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aedf3872e7da758981779437ff00a223_JaffaCakes118
-
Size
632KB
-
MD5
aedf3872e7da758981779437ff00a223
-
SHA1
435c4fcc9f94d29a3ae5eaadf0defa9cb4299e84
-
SHA256
8ba33bf38e69791dc5f9b62f48c8dc2e98fbe2a2d817827e0029da2df9810f85
-
SHA512
62a98b420a002bccdfda6d102cdb1b6da5cee6ff5df3eca1bf745cccba287bf40811148ab2085e17f6d2ca4fb4c0b238f048fc2cfdf73ceda066635977b79d88
-
SSDEEP
12288:eVJZNj6ab7kF6BLndJPn2KObMBr32whGoeYZvYePXkRVf/Zq2655mwBHAyV:+ZNj6ab7kF6BLndJPn2JCrn6CkRVHZqT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aedf3872e7da758981779437ff00a223_JaffaCakes118
Files
-
aedf3872e7da758981779437ff00a223_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yygLD8rv Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kaY5nSRd Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
awETplnv Size: 600KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BQff6QHC Size: 729B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jnBuAr13 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ