Static task
static1
Behavioral task
behavioral1
Sample
2ab0c9af16a8c1c692fe98981578a7fb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ab0c9af16a8c1c692fe98981578a7fb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ab0c9af16a8c1c692fe98981578a7fb_JaffaCakes118
-
Size
32KB
-
MD5
2ab0c9af16a8c1c692fe98981578a7fb
-
SHA1
8f6e0317b1d067afb3b688cb847c19f8cbc23248
-
SHA256
bce096e2dd02ff431edb82ac110fc159c3733e9e44794419683d04ca856be152
-
SHA512
2b63a1a192f0cfcfeea67d62bcdea74c73c623d62a9410b36e4559e106ed24a8c8bd63bb727f9fc6540ab92754961addff603e2c641f96b936515efc83817a01
-
SSDEEP
768:aQbpimrVKtboKbAdO0thY+/T2acnIOr8w3b2eXvXu:aQbJVKtjbAM0LY+/CacF8wKeXvX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ab0c9af16a8c1c692fe98981578a7fb_JaffaCakes118
Files
-
2ab0c9af16a8c1c692fe98981578a7fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Z�Y�*��C Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
s��|*7Z Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE