Static task
static1
Behavioral task
behavioral1
Sample
aff6d863165a5a824b69e384fd4811b4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
aff6d863165a5a824b69e384fd4811b4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aff6d863165a5a824b69e384fd4811b4_JaffaCakes118
-
Size
19KB
-
MD5
aff6d863165a5a824b69e384fd4811b4
-
SHA1
ce7b42e96271a729ba45600c2a9c323fb433090d
-
SHA256
154326c361b2c12e250c7af516b7ee24ce34e98cc31db6333b68a6d1da655ab6
-
SHA512
9c1accb91f2c7d86ebbb1f3144e4d8139e43fe32e1e25131119f4fe66e92e83e41f7816c2ecbd79f1dbf98028e0ed590a2f2e5015c113d491ac695fe5e5c2d5f
-
SSDEEP
192:naLLvvjszgMxCVHjWlRuvFSkz7H5IqpZNsmvLGZyshfGcg8y0MtbaclwVZPtQMDk:eXNMweCz7Z2xhQ0MV3wtnftMdXpiSSt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aff6d863165a5a824b69e384fd4811b4_JaffaCakes118
Files
-
aff6d863165a5a824b69e384fd4811b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ab Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kylin Size: 1024B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE