Static task
static1
Behavioral task
behavioral1
Sample
0ab4dfaa819170914d5cd069e5ca97da_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0ab4dfaa819170914d5cd069e5ca97da_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0ab4dfaa819170914d5cd069e5ca97da_JaffaCakes118
-
Size
22KB
-
MD5
0ab4dfaa819170914d5cd069e5ca97da
-
SHA1
840062403ba810e10bf6728b788795bcda499c43
-
SHA256
2e00c7ec8b067b1a5b3137a3906126f6e6f56535d19e730bb38e50641851972b
-
SHA512
92d3b5d53b8eb5fa3e67e92005e5b47a65467955d69765f74d53431aaf2b497f1742f06e42aad3f63d149f70f206545c4b0d7848927453d54c407d44ac920aa6
-
SSDEEP
384:k4FDmssga4mkBWZlu+IoZ0yp+c2DHv8xg4eLkq3/YFTWFSZ2QmK9F7J7tG3Ltnwy:k4FDmssga4mkBWp3Zz2DHv8xg4eLkq3B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ab4dfaa819170914d5cd069e5ca97da_JaffaCakes118
Files
-
0ab4dfaa819170914d5cd069e5ca97da_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ