Static task
static1
Behavioral task
behavioral1
Sample
aaf1fe6140ec9dab4fb5a4ce5f62e08b_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
aaf1fe6140ec9dab4fb5a4ce5f62e08b_JaffaCakes118
-
Size
642KB
-
MD5
aaf1fe6140ec9dab4fb5a4ce5f62e08b
-
SHA1
cb323a9b2e0479d6814f5a20b0b05d2c3272340d
-
SHA256
e4ebb2c69a427c815f3bb64a524a7e14893029d8be22a25bbca344f35d8294c6
-
SHA512
3cefc16db096b860202d84e027f65df2ce39275c102a4d74fceb97c0b2cc4adb9f058ba1ade5da3f699f64cb1417a5e3e4207b08433efd73ab11fc0e1caffd35
-
SSDEEP
12288:4ya+nhKwCElN8wOrH3M9U7EQBM/uvSLTvrQ/gCQNop0BfFP4xPFj0CQ945E:PaYBFlqwwHcafgCMftUtjyu5E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaf1fe6140ec9dab4fb5a4ce5f62e08b_JaffaCakes118
Files
-
aaf1fe6140ec9dab4fb5a4ce5f62e08b_JaffaCakes118.exe windows:4 windows x86 arch:x86
bf1ac19e064ab24b68e7b67cadeeb289
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
Sections
infqejcu Size: 50KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oeohjssn Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
faochgnw Size: 583KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
krahlois Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE