Static task
static1
Behavioral task
behavioral1
Sample
ab508cf5c214384e614c3d8dc0d030a6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ab508cf5c214384e614c3d8dc0d030a6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab508cf5c214384e614c3d8dc0d030a6_JaffaCakes118
-
Size
424KB
-
MD5
ab508cf5c214384e614c3d8dc0d030a6
-
SHA1
36c02ad29522924d7d2f59e6b5ae96f11a1147e9
-
SHA256
deea3141d49c68ab5a069476209d5fffc905b325b58e0b6f67a28562c99ff559
-
SHA512
5e776b9f3e75e6b64a1ba0db9735b222dd4e8f872f28e78c4841b3003761f033f472bf7b0e9adcb98573496632ba2ec9223e8ef94801f2d1cc1da550a2234cdb
-
SSDEEP
3072:hYBCqsGxxeq/qU7raAkFksaME/GSpnIgGbswpJoNIQzeeeeo4/QMoWL60yyxjr9b:snIgK54IQzeeeL4/QfWgmjr9QhM2+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab508cf5c214384e614c3d8dc0d030a6_JaffaCakes118
Files
-
ab508cf5c214384e614c3d8dc0d030a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 290KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ