Static task
static1
Behavioral task
behavioral1
Sample
abd3b2254eeddd03f4b28d1e852358f2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
abd3b2254eeddd03f4b28d1e852358f2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abd3b2254eeddd03f4b28d1e852358f2_JaffaCakes118
-
Size
96KB
-
MD5
abd3b2254eeddd03f4b28d1e852358f2
-
SHA1
7f5c582a694f8f135e4bd39adaa021278c543627
-
SHA256
f69376fefe86788f0e8ca2c148352b5a16abdcc7d6d287bd64f36d869882671f
-
SHA512
c4fa7f5617d4a2b119fb2e41b8b18f184a7ef423b625f4bf5e90846f1275bf79ee7a17e50eb199ca5f9208f9bb51abf80072ea126aa95effb3e687ce4a3aeef4
-
SSDEEP
1536:xsCEYY0uEFecs3vIJ0ps94gTMStr/BBJCUr6YRm2gU3tc42ZbL8KO0VsrX7N:xsCNY0dzs3vIJz/tlBJCCclj2/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abd3b2254eeddd03f4b28d1e852358f2_JaffaCakes118
Files
-
abd3b2254eeddd03f4b28d1e852358f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
Size: 5KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE