Static task
static1
Behavioral task
behavioral1
Sample
ab1195616a3fdd8498a2e3a39f1cbf5c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab1195616a3fdd8498a2e3a39f1cbf5c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab1195616a3fdd8498a2e3a39f1cbf5c_JaffaCakes118
-
Size
18KB
-
MD5
ab1195616a3fdd8498a2e3a39f1cbf5c
-
SHA1
073080a46584f9caf6768d933120763cfc7988cb
-
SHA256
7add9e25191f49af67f7a0c1c1753f2050ca7364760605f2823f5db08b6cef7d
-
SHA512
effd46bd4bf6d8a9167771996dd3fbe093f261d64994bd1333f451cb9364c4f852516fea27b8feb82a906d73d9feb15aac72a52ff3807deec5e71dee35de4697
-
SSDEEP
384:ElEHftQWOqOL9NaU1MT9NCZgCtvW1z14SDZ2dWCsaRw9rFF1I/A:4E/t1OLWp4WhWCCWzaArFF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab1195616a3fdd8498a2e3a39f1cbf5c_JaffaCakes118
Files
-
ab1195616a3fdd8498a2e3a39f1cbf5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE