Static task
static1
Behavioral task
behavioral1
Sample
ab16e5a1bbead5432e0a35450d62ebe5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab16e5a1bbead5432e0a35450d62ebe5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab16e5a1bbead5432e0a35450d62ebe5_JaffaCakes118
-
Size
31KB
-
MD5
ab16e5a1bbead5432e0a35450d62ebe5
-
SHA1
ae842465f1926d3142f8dbfb60247a2582286791
-
SHA256
19d750334208162a058d7c7079a894baee4079abab2ed4df6d2710cd68de97e6
-
SHA512
aa11185e2df57495585449cafe4c0c2a4d00e176a543f6805114f58161144415ac484a544aed0871153c08514a344ae0eb5e31f88dcaff337b68cf8846a5c39a
-
SSDEEP
384:bSqLR5hAlr3rqQ/pmono6O7xBgnsAevhX5eAm50PRGXh5w66iEKwsFPYsz:bHiz+r7blAoW5gW5qi1wspYi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab16e5a1bbead5432e0a35450d62ebe5_JaffaCakes118
Files
-
ab16e5a1bbead5432e0a35450d62ebe5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE