Static task
static1
Behavioral task
behavioral1
Sample
04ae38ff352ef77fa04e6233c59874f2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04ae38ff352ef77fa04e6233c59874f2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
04ae38ff352ef77fa04e6233c59874f2_JaffaCakes118
-
Size
223KB
-
MD5
04ae38ff352ef77fa04e6233c59874f2
-
SHA1
f0c7aa7c8cbea75d912933348ec83853e8124100
-
SHA256
976f65a9f53f05c61343e6b29038bae0e9a34bbaefc77cdc6791dc9c66a8d5e2
-
SHA512
ce0ed72c13f3d2a5bbe10f761b9221518ae6d399c1316bc9ec6f478f112e22d36c2f17285c94a9794118fc623f61d0d41b32d7eb96c3020cdeb5e4333b45a732
-
SSDEEP
6144:4FnYmgFqyN0O8ESLJkK/6/BI8CzH7MMMMMMSMMMMMMkR:AeBM38BIBzbMMMMMMSMMMMMMO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04ae38ff352ef77fa04e6233c59874f2_JaffaCakes118
Files
-
04ae38ff352ef77fa04e6233c59874f2_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE