Static task
static1
Behavioral task
behavioral1
Sample
ab3c0c1f29f9ab9a07591e10cdc9bf6c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ab3c0c1f29f9ab9a07591e10cdc9bf6c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab3c0c1f29f9ab9a07591e10cdc9bf6c_JaffaCakes118
-
Size
1.2MB
-
MD5
ab3c0c1f29f9ab9a07591e10cdc9bf6c
-
SHA1
aac56011d1381309d0e46e4751b1f16e40635407
-
SHA256
fd27d03c34d23cf03a70ca72c02949f3630dc27d41d9f888a837692f82c0d798
-
SHA512
991a3693f24eb5ab7dfcc5d295335aba2166e229ca3596149cca7e8b449dad8f536b5f348c4b9cbe99465c4bb3e1d1053e5efb91da26373d36fbe5dc6404b425
-
SSDEEP
6144:j2cPNAfYCxx6xlMKJSxkw4RNIItpddRYiaffr88kWZKv7mvsc/wRvrlnHM7X1HxO:j2u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab3c0c1f29f9ab9a07591e10cdc9bf6c_JaffaCakes118
Files
-
ab3c0c1f29f9ab9a07591e10cdc9bf6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ