Static task
static1
Behavioral task
behavioral1
Sample
1ade1a0fad62bf6617d9076f05d37565_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1ade1a0fad62bf6617d9076f05d37565_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1ade1a0fad62bf6617d9076f05d37565_JaffaCakes118
-
Size
153KB
-
MD5
1ade1a0fad62bf6617d9076f05d37565
-
SHA1
95b0ac6c5ef1e5255d3376929817f5ecaf2bb923
-
SHA256
46f63d4d12d3ea78c723b511559bcefccf9db70541008dc015d512326aa9d41c
-
SHA512
a02f010ec24b1042696aeea17a249f7a9d94b959454d79b21901e3450ef3d52189b02a750ff16e5d8b5f825123f3749de762737c0eb40c52e94927a387765f53
-
SSDEEP
3072:JwAnhHz/DKr4ebEWVKMxJ/nRsyt0V3Yh0vU4WVyGycfcun9OIK:2AnNz/Or4ebEWVKMxJKi0AAUKbeK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ade1a0fad62bf6617d9076f05d37565_JaffaCakes118
Files
-
1ade1a0fad62bf6617d9076f05d37565_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 306KB - Virtual size: 305KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ