Static task
static1
Behavioral task
behavioral1
Sample
2abf9350fb13b75f7b20a962b35a1016_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2abf9350fb13b75f7b20a962b35a1016_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2abf9350fb13b75f7b20a962b35a1016_JaffaCakes118
-
Size
58KB
-
MD5
2abf9350fb13b75f7b20a962b35a1016
-
SHA1
0663d4181b6d18bd26597bacbb64752b3becf6c2
-
SHA256
fed75c4a9f973be7c9623c9a437adf296b09faa89dae5d9e75dfccd87059baaa
-
SHA512
8aae2133ce7b793b7659fc12ff37d8fec7c1fd6e07be3c6ae00219286be304c301b85162145f34ce5793788eb75fa8b25a5ffcc7edf64e4f2b35c74f7b0e78ed
-
SSDEEP
1536:tsyqFgloD9H0/YjTGN+RcGjPLhteGSCXK8cZ:tJo9HRjSNo7PLhteTo4Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2abf9350fb13b75f7b20a962b35a1016_JaffaCakes118
Files
-
2abf9350fb13b75f7b20a962b35a1016_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 49KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petite Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE