Static task
static1
Behavioral task
behavioral1
Sample
0adb09b9f62f6ec3e6b4c6924143b931_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0adb09b9f62f6ec3e6b4c6924143b931_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0adb09b9f62f6ec3e6b4c6924143b931_JaffaCakes118
-
Size
1.1MB
-
MD5
0adb09b9f62f6ec3e6b4c6924143b931
-
SHA1
66725b9c82200d7aafc3685b38089b4f2c1e3db5
-
SHA256
5fc2258c35b4dd74c8b9d9ed7a559c06bc93d3028583007a730d609e6efcc6dc
-
SHA512
b6212cf75e51914aadcff37ff329eff497b9a90f57cab6fdb9468d5481933e6a37b71269bbb7b6238e90ee0cb5b4e504c2bd98feda4c36cbe201140d66c7a677
-
SSDEEP
24576:UuhaSeZJ8NI8UeZJ8NI8MojKeZJ8NI8UeZJ8NI8MojC:b68p8Mojb8p8MojC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0adb09b9f62f6ec3e6b4c6924143b931_JaffaCakes118
Files
-
0adb09b9f62f6ec3e6b4c6924143b931_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ