Static task
static1
Behavioral task
behavioral1
Sample
ad0a476940ce8ea12e7ad0e1b0da6ab6_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ad0a476940ce8ea12e7ad0e1b0da6ab6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
ad0a476940ce8ea12e7ad0e1b0da6ab6_JaffaCakes118
-
Size
496KB
-
MD5
ad0a476940ce8ea12e7ad0e1b0da6ab6
-
SHA1
e9d5dcdc39cfecba03cac68b16ffc26498e08d5b
-
SHA256
1d3c5a753b4904c08e019517053287b54c1ed0ab600094fdbd7a8c88889cb188
-
SHA512
ca4836f27131ef352f3027be8fe1dcbd721c90f13dc3a1f16312fa766c5ff80f3e09b387697ea2c7af1071246f305dffd66207bedb03bee59e86742925fecc4b
-
SSDEEP
768:HtcYyWziCDjcOtuOzo0sd/wIZmDCka0L1CuyF4b7AOfzivOkoKIFGR:Ndz8O04IZH7gzzivHdOGR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad0a476940ce8ea12e7ad0e1b0da6ab6_JaffaCakes118
Files
-
ad0a476940ce8ea12e7ad0e1b0da6ab6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 484KB - Virtual size: 483KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ