Static task
static1
Behavioral task
behavioral1
Sample
ad1173fc2e281bd54ca0a895d74fe37b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ad1173fc2e281bd54ca0a895d74fe37b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad1173fc2e281bd54ca0a895d74fe37b_JaffaCakes118
-
Size
44KB
-
MD5
ad1173fc2e281bd54ca0a895d74fe37b
-
SHA1
d2dd1e3679f950ec76838e12b41513db5f0bf396
-
SHA256
3a1a86e411610044d6e5efa535605e51742bd5f52572a81aee87b6110c6ad6f9
-
SHA512
1a269a5eb9f3d7767d271fe60e7c8c7c98cbc4b23249cd492b0e81b55cc82283cf293942e752886d1741dfd077e51a85872b082ed14a91f7746582488a84a560
-
SSDEEP
384:mKTInWJa+vNghlKjRzXKyl4SFy88OR5l7Fpct5b2C:s5SNg3Klayl4ayNOR5FFat5b2C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad1173fc2e281bd54ca0a895d74fe37b_JaffaCakes118
Files
-
ad1173fc2e281bd54ca0a895d74fe37b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 548B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ