Static task
static1
Behavioral task
behavioral1
Sample
ab10bce3aa8acdb26adf5bc2fdca2f8f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab10bce3aa8acdb26adf5bc2fdca2f8f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab10bce3aa8acdb26adf5bc2fdca2f8f_JaffaCakes118
-
Size
376KB
-
MD5
ab10bce3aa8acdb26adf5bc2fdca2f8f
-
SHA1
495c42556a0f13a96e413bdb0ff297c4f02ee8bf
-
SHA256
d801614b4c484f7b0e8d0f06627b0fa0a52a92107604e2b8d58300bbb4de78d8
-
SHA512
fc47e821ef05371fc571f4262b89aaa8ef975d656af0c70c0241cf228662980dce30f94700c2393802edef337533e300ce6f629baa076de8138f4da0c1f60012
-
SSDEEP
6144:zIHYsZbS31zXqSNQgeiOKnDYVH0pwpMWEmpRBJ1NuUBY+f7zAF11whggaoHofphl:zIVZel6SOgeiOKEVH0ppWfBJ7XBczmR2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab10bce3aa8acdb26adf5bc2fdca2f8f_JaffaCakes118
Files
-
ab10bce3aa8acdb26adf5bc2fdca2f8f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 948KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ