Static task
static1
Behavioral task
behavioral1
Sample
ab0d793f623d1cadf33b5f9a46ea4594_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab0d793f623d1cadf33b5f9a46ea4594_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab0d793f623d1cadf33b5f9a46ea4594_JaffaCakes118
-
Size
45KB
-
MD5
ab0d793f623d1cadf33b5f9a46ea4594
-
SHA1
ba542aa63fb35e518aa2fd612bfcf46e85720b65
-
SHA256
f788ed0c81de7836db7bab3dd5d3e7e65fcfa77e44fedf6b661fb2a00255c19e
-
SHA512
a334829b70e2ec41d65d303d3580a056c62e25c924a02dd67809992e9264b5fe741cfc47c3947ef477e6ee622163354ff5bf0025e68eff1c5acb52b48319b41a
-
SSDEEP
768:JdPUqyS8uc8r1aq6nPoZHMLrlYj1FQM7WxlaNLI7cVc4HczhP1OiNk:jPPyCc8rj6gMLrGj1FPq+IwHHghPxO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab0d793f623d1cadf33b5f9a46ea4594_JaffaCakes118
Files
-
ab0d793f623d1cadf33b5f9a46ea4594_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
l>� 0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
l>� 1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
l>� 2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE