Static task
static1
Behavioral task
behavioral1
Sample
ab14d8e3e9ed0bd160bdab3628dd6b07_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ab14d8e3e9ed0bd160bdab3628dd6b07_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab14d8e3e9ed0bd160bdab3628dd6b07_JaffaCakes118
-
Size
35KB
-
MD5
ab14d8e3e9ed0bd160bdab3628dd6b07
-
SHA1
ae05d506f5e4034b64d69a8eb0751c3223af8029
-
SHA256
f742fed007601b27c228c9cc6a135f9e4f479978aee4bb23b734734ed7a5c5b5
-
SHA512
f6d5487be5d13ab2db30ad4347c42ce187e64b3d9b23a99b0d13e75a6f2322effb0b17fa983cfbb8681ebbee0cc2344b3b34c787be5850889f578bcc4e526f11
-
SSDEEP
384:gQ7pg8n+izdbH24PYn3wkaCxHEFIcwXnFEIvp4vSyk2LkVF6V+iFeVtbdX0V3562:KidzN2ivkh6wXnFESiSB24IV+iCbdX0h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab14d8e3e9ed0bd160bdab3628dd6b07_JaffaCakes118
Files
-
ab14d8e3e9ed0bd160bdab3628dd6b07_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
DINGBOY Size: 512B - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DINGBOY Size: 34KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE