Static task
static1
Behavioral task
behavioral1
Sample
ab306ef92a869f23dd18b85097a5a746_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ab306ef92a869f23dd18b85097a5a746_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab306ef92a869f23dd18b85097a5a746_JaffaCakes118
-
Size
128KB
-
MD5
ab306ef92a869f23dd18b85097a5a746
-
SHA1
084b9106d224dbc07155d4b6ba57a8227c2ecf07
-
SHA256
f907f7097ce9291245d36fc0fe07836f1bab14dde4763a7f37eea561c42119c6
-
SHA512
eb4c6e7e4e3bd2f0a86c5dde7067c889c6b21ce443d1ead3d8d108a54907feb9a50e95c9c7f47e1060691d32667fa6b01f6e06a1594bf97970c21eaf870faf42
-
SSDEEP
3072:uGHi6mw+fjNHsXJNYxHWPKBV4ENNoDjrqVDAEmJI:+tfjOXJSxH54ENijrODAE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab306ef92a869f23dd18b85097a5a746_JaffaCakes118
Files
-
ab306ef92a869f23dd18b85097a5a746_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE