Static task
static1
Behavioral task
behavioral1
Sample
1abe3d1959d2b3e9cdbfc35ca256bfb6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1abe3d1959d2b3e9cdbfc35ca256bfb6_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1abe3d1959d2b3e9cdbfc35ca256bfb6_JaffaCakes118
-
Size
93KB
-
MD5
1abe3d1959d2b3e9cdbfc35ca256bfb6
-
SHA1
814085e2d1353755139c88567502c3d3f2a54002
-
SHA256
9986f97cc82e201d1cd4a514772dcd10a273aabb48e96cfe6b50dcb3e21a0eb8
-
SHA512
b30943a8a4fea0d05843f2a292419603d2688b20acabc84bcfd2c1d07dd43625274e8e8e67a29ae194f4d25b827994d9b99b7eaa87ac81ff6d11029a5ab9a1a6
-
SSDEEP
1536:Y/oAuawO8tnXm3zerSuhI3qaQh7pHm3S/:do12XmDxqqC/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1abe3d1959d2b3e9cdbfc35ca256bfb6_JaffaCakes118
Files
-
1abe3d1959d2b3e9cdbfc35ca256bfb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE