Static task
static1
Behavioral task
behavioral1
Sample
ab2a311d100aa80b01d5d2eb8ae7eccc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ab2a311d100aa80b01d5d2eb8ae7eccc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab2a311d100aa80b01d5d2eb8ae7eccc_JaffaCakes118
-
Size
110KB
-
MD5
ab2a311d100aa80b01d5d2eb8ae7eccc
-
SHA1
be3f66143714e02541a61577a660f29d6ae28a2f
-
SHA256
2da7ed5c5d13f06d453a86e2382f7c77fe0c0717671a8bed18957c5c7cc77c11
-
SHA512
86117dc963abeae5a4b9f717603a712a1c25b649f48b4a9c39ac6d04f1773a1090578b99bfd9f39f3e951ac8afc8b17136a7d377e5c389f085dfcec0f287cd5d
-
SSDEEP
3072:zkZqlIx536iXgdEAtlg1lKDzVs2MVJ11j:QJhhAtGOMVJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab2a311d100aa80b01d5d2eb8ae7eccc_JaffaCakes118
Files
-
ab2a311d100aa80b01d5d2eb8ae7eccc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE