Static task
static1
Behavioral task
behavioral1
Sample
ab19a5f491f3fa3ed17a146b19193926_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ab19a5f491f3fa3ed17a146b19193926_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab19a5f491f3fa3ed17a146b19193926_JaffaCakes118
-
Size
16KB
-
MD5
ab19a5f491f3fa3ed17a146b19193926
-
SHA1
3974d3b8b16d0efb6ef403b97c402c0d58261885
-
SHA256
20ad4b0d5dffb70b8af7f916d13f38451ef240ca1a96c648b039517902a0c2fb
-
SHA512
6cc3ccc67bd9858b380b9dd82e6745a311090e2b31c92a35ed7c1a2a2b93724aed940d13858fcafb85b8f42fc09390edd6706ba3932d4629326ba47ec1da34b4
-
SSDEEP
384:Mt4Lcg/abxFLnUkLF5DZb8mo7wGZipCtp:Mt1PbnUkLvZb89g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab19a5f491f3fa3ed17a146b19193926_JaffaCakes118
Files
-
ab19a5f491f3fa3ed17a146b19193926_JaffaCakes118.exe windows:5 windows x86 arch:x86
130819b265d35e86ec8e1621641c17cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
advapi32
RegOpenKeyA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 490B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ