Static task
static1
Behavioral task
behavioral1
Sample
ad011b735b8272f453ec58f3c0f3cc83_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad011b735b8272f453ec58f3c0f3cc83_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad011b735b8272f453ec58f3c0f3cc83_JaffaCakes118
-
Size
371KB
-
MD5
ad011b735b8272f453ec58f3c0f3cc83
-
SHA1
c6c871846cc8ba9bc11de212f5bbe4e53fc95d30
-
SHA256
62f2edd9a5ed0b174b636b366567318a27d5e3e5470109189588485782de96cb
-
SHA512
b0099006020fca3fce68b49a26252832a85b65cbb79b22c53fdc81c0258bdd7f8903db01398001789aee4e313e05f878b93cd4b7f32d584d39a4737c715563f8
-
SSDEEP
6144:KgF1Os7SU3jfKth0V526HzRqsAIgkqiNeZXzaPjgbhvsGPbX4+:TX2tGVBq7IgkqiMXzMjgbVrZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad011b735b8272f453ec58f3c0f3cc83_JaffaCakes118
Files
-
ad011b735b8272f453ec58f3c0f3cc83_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 369KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE