Static task
static1
Behavioral task
behavioral1
Sample
1adead073f23569cf9ac83c4bb4002bd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1adead073f23569cf9ac83c4bb4002bd_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1adead073f23569cf9ac83c4bb4002bd_JaffaCakes118
-
Size
19KB
-
MD5
1adead073f23569cf9ac83c4bb4002bd
-
SHA1
2c0beb49adfe2d2bb35576ea89c97a7b32e4a219
-
SHA256
5c651af30e8bf31f9ee2f50e6deb67f23111dde2975f1e4ecbae46c9388ca350
-
SHA512
6ab934782ee0b354d562254986dca684dc5b3ed2e071e521d7c18993af909decaa19d00064ff652bd27e6cc57498150bf596a6d8e07879d1d0e565335ddc68e5
-
SSDEEP
384:mhu7GOuz3bkrQ8apdCKRNmSP8nI8l3yK7xZEoXxgnuasKcwfaGDdp9xw:12LiCvRNmTI8l3yKdZETuasnyp9xw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1adead073f23569cf9ac83c4bb4002bd_JaffaCakes118
Files
-
1adead073f23569cf9ac83c4bb4002bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
pdata0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdata1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdata2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdata0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ