Static task
static1
Behavioral task
behavioral1
Sample
abf76b3b24c0a035cdd93970d2893be5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
abf76b3b24c0a035cdd93970d2893be5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abf76b3b24c0a035cdd93970d2893be5_JaffaCakes118
-
Size
1.6MB
-
MD5
abf76b3b24c0a035cdd93970d2893be5
-
SHA1
3d7f844e4cd1ee23456fce9770069617cff7dbff
-
SHA256
b20271e1ae2dd8101b9636a2f7592a1211be9fad012ade4b3daee351b06cf0df
-
SHA512
58d24d151d564973ef7f23fe58cc2c080fb74296233f30b94085737f5ebfd6b91c4cad188e796bf0a54d1adbd45ffa14352b16bf1272a964b5257efa7a0d1781
-
SSDEEP
49152:v2oD67W1UfnhipDveeV+Iwb/x3S4f3uJ:nDuhi5veo+jbp3n3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abf76b3b24c0a035cdd93970d2893be5_JaffaCakes118
Files
-
abf76b3b24c0a035cdd93970d2893be5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ElChino Size: 1.6MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE