Static task
static1
Behavioral task
behavioral1
Sample
aeeed1a805230f8e595fa11b93643274_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aeeed1a805230f8e595fa11b93643274_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aeeed1a805230f8e595fa11b93643274_JaffaCakes118
-
Size
12KB
-
MD5
aeeed1a805230f8e595fa11b93643274
-
SHA1
927c3a562162b93ef833d8c3451c0333299d34b2
-
SHA256
b4be9295ae75f5c74683cd6ca6d67c71f9972f9067f7aff60409ce5307cc65fd
-
SHA512
abb351d1a10132b7b1314ed6937910fcc6d4c72c54596c6128c0672ab835cc14fa86518e6853854c7a62afa4f0c4713aa618b05fc67fe8b4b295133b0bf7ebb7
-
SSDEEP
384:YVtMWXXyw6jHqdX0Yi2OsdY2JBsfCedHHLL/c:YgrwaHqdX07sdYIBsfC2HrL/c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aeeed1a805230f8e595fa11b93643274_JaffaCakes118
Files
-
aeeed1a805230f8e595fa11b93643274_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
WIN0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WIN1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WIN2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SUE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE