Static task
static1
Behavioral task
behavioral1
Sample
abc9777ff320a6770c6409d354e47be4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
abc9777ff320a6770c6409d354e47be4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abc9777ff320a6770c6409d354e47be4_JaffaCakes118
-
Size
116KB
-
MD5
abc9777ff320a6770c6409d354e47be4
-
SHA1
6db4694e1e26080252909dbd012710a74e6a5a30
-
SHA256
45cbed02ad4cb037ce5e1442b0eda2b77ca603bc9500dbbc10cc5da51dc0737c
-
SHA512
6fe78cc678b801bc58bae4059b64f5d60df49a81956dcf33bbaecc8bb0208d0128db4062edc9d6400e07a5c11e3414388d959b5c8a8a1d1376866fe819ef1899
-
SSDEEP
3072:ZkVFYtZg7g2G1kLuh4+UtyD+NOXCthM3Tyo+DAPTna:Zvg0tSLuC3tBNAJ3TD+DITna
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abc9777ff320a6770c6409d354e47be4_JaffaCakes118
Files
-
abc9777ff320a6770c6409d354e47be4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE