Static task
static1
Behavioral task
behavioral1
Sample
abeab40b5d6894628b7f3b6771d1f08f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
abeab40b5d6894628b7f3b6771d1f08f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abeab40b5d6894628b7f3b6771d1f08f_JaffaCakes118
-
Size
103KB
-
MD5
abeab40b5d6894628b7f3b6771d1f08f
-
SHA1
564a9b741a68fbe33b9c89bdf6949ff4dbefe80c
-
SHA256
70600eb7edc7dd2c9aa29f5edb0a8092e7f5fe3acc78aa61d738e1411518d505
-
SHA512
ba8473ab345a104234f10a6a4f9d59f861c7bd48561467af70c67784eab1be4635ec1911d41dbb708ad7f3a17ba82b10ac3233573ee5c636347f656fab16228c
-
SSDEEP
1536:EcW/85DftTKVnpLn1UmJaLUXsNHIrwlW45egWn0/Wube6iIoPaeBngFFrYZROFmG:005BuMUGHIrwoC0n0/+6qrBsgRObtZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abeab40b5d6894628b7f3b6771d1f08f_JaffaCakes118
Files
-
abeab40b5d6894628b7f3b6771d1f08f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 99KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE