Static task
static1
Behavioral task
behavioral1
Sample
abbdc593cd64e5fb4aec97c9c74cb6cb_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
abbdc593cd64e5fb4aec97c9c74cb6cb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
abbdc593cd64e5fb4aec97c9c74cb6cb_JaffaCakes118
-
Size
38KB
-
MD5
abbdc593cd64e5fb4aec97c9c74cb6cb
-
SHA1
aaea4351f44c534b9515be6d752c9090837df4be
-
SHA256
3adee366bada895b5f664e0b1ef78a01eef0b84e970b7e5c8c9f7038c374e75a
-
SHA512
4bcc04e5f79eda53688b13c6ba7899736d7be77abf25fdc245007ebb3b3785a13522dbf028ab0353664e7831f0276b4417af498a9d465b1dcd83611f5796a388
-
SSDEEP
768:0x5xPurl6ivvO5wm2rE4yyt15OGxB6Iv11GbO2yJM6/7D:05u1vvOxRyt1Hj6W11GC2N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abbdc593cd64e5fb4aec97c9c74cb6cb_JaffaCakes118
Files
-
abbdc593cd64e5fb4aec97c9c74cb6cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
d5cd4a2d5bb9b947f8ba111823047f7e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
_open
Sections
.MPRESS1 Size: 34KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE