Static task
static1
Behavioral task
behavioral1
Sample
aba92659c917e6020edf13797450b1a1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aba92659c917e6020edf13797450b1a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aba92659c917e6020edf13797450b1a1_JaffaCakes118
-
Size
498KB
-
MD5
aba92659c917e6020edf13797450b1a1
-
SHA1
8d12952e35e83d4366af4aa9b5df01c89a98959d
-
SHA256
64f3fa1942f003e2a1dea47c0f3eeeef63842534d6465bcb069ba86eec763623
-
SHA512
63fa2f08076e411f57e3776d09fc94d75310209a6a08a08dc4f69dff5ebcd5c4c42037316e8c545e4d7c906fd2a074f413894b66c00dd505fc08117cf8512808
-
SSDEEP
12288:j7TDS6xUIG8/o5sQwK1c2obY7VbhiijU2C:HXS6xUh8w5sbYocdj0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aba92659c917e6020edf13797450b1a1_JaffaCakes118
Files
-
aba92659c917e6020edf13797450b1a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 75KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shit Size: 322KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE