Static task
static1
Behavioral task
behavioral1
Sample
ab30027d1718c622f90455c5caaecfb0_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ab30027d1718c622f90455c5caaecfb0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
ab30027d1718c622f90455c5caaecfb0_JaffaCakes118
-
Size
870KB
-
MD5
ab30027d1718c622f90455c5caaecfb0
-
SHA1
90eaad4323b07673cdab81d72c666164a570fa99
-
SHA256
24964ca88880739e7fe73563d8a3b49d87b00eccf06a9e9d91d6ecb18cfdb5df
-
SHA512
c64f0fcb72c478faa11a872b0d3fec304e23e5bf642a57cc6e0f20b6f84c04ee2405b3ea2cc759945507e713bbfb5f6197748b8cb0313587c6fde318c5eb6376
-
SSDEEP
24576:4RFtj2dfU3XEFrR41+Ye4Li1MdT+noVmfSi2CMEx:4B6d8nmrC1LL7QWmfSZEx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab30027d1718c622f90455c5caaecfb0_JaffaCakes118
Files
-
ab30027d1718c622f90455c5caaecfb0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 340KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ