Static task
static1
Behavioral task
behavioral1
Sample
ab1f92f51d59e0ed2b88c0fef0f0e4a1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ab1f92f51d59e0ed2b88c0fef0f0e4a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab1f92f51d59e0ed2b88c0fef0f0e4a1_JaffaCakes118
-
Size
914KB
-
MD5
ab1f92f51d59e0ed2b88c0fef0f0e4a1
-
SHA1
eb8bcc6be03704796d8444a0e3c6933e58932bf5
-
SHA256
d2ec0b8b900b11cabafe0c0046198b0197a963dd8c92fcd793ec64d0321fb3c7
-
SHA512
be48d19ed8722adb72ceacbe6645ffb7271e05054d1ec26c0bffb75537bd0de648101930aad26223870647297128a0abb6bc88edf2fe4a2326a13b8724843c66
-
SSDEEP
24576:FXmA5hVOGfQfaDFfGjcpmBRcqzM093W7H+pYO8D/:1mknICDQRRY09m7Lt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab1f92f51d59e0ed2b88c0fef0f0e4a1_JaffaCakes118
Files
-
ab1f92f51d59e0ed2b88c0fef0f0e4a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 670KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 136KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE