Static task
static1
Behavioral task
behavioral1
Sample
0aba659ca85e3aa8fbf9b57fd4827fc6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0aba659ca85e3aa8fbf9b57fd4827fc6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0aba659ca85e3aa8fbf9b57fd4827fc6_JaffaCakes118
-
Size
2KB
-
MD5
0aba659ca85e3aa8fbf9b57fd4827fc6
-
SHA1
de8e30e61c35a00303373b1c61c8deb68738874d
-
SHA256
a5d558d8390c8451cf010db9225ca8cf0327a5f55e99901652d2bbc413ad3f40
-
SHA512
67cbfcd3a878df28fcd2805a6dc37470cb468691ee240409a9c34b8070c1688ec22ef180148b21b5373ad59aaa2167e69e26ac20ef84ef69f5bd021d9676903a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aba659ca85e3aa8fbf9b57fd4827fc6_JaffaCakes118
Files
-
0aba659ca85e3aa8fbf9b57fd4827fc6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 227KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ