Static task
static1
Behavioral task
behavioral1
Sample
ad3d670bcb9a94220b9acb97136a70ae_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad3d670bcb9a94220b9acb97136a70ae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad3d670bcb9a94220b9acb97136a70ae_JaffaCakes118
-
Size
186KB
-
MD5
ad3d670bcb9a94220b9acb97136a70ae
-
SHA1
62a55f373cae85c615705d0918306c6a45660a33
-
SHA256
53b5b2dafd7906b442753b9aaa2bca1c35fbd879c044d37fcb704b51a2c16a5f
-
SHA512
12944aa0b3db980c738347b029f2c3d15c769c8e370f3812ef16749b4999dd956e68dbcd406f04b3e47c4523a8c5ca2682d75c889e258c923ddd978e25044618
-
SSDEEP
3072:J+lP0YKtSob5TAni5dFHaNm7dl3szV1CvyKjcEnsDWJZrv94F0jSL8vqk/L5XC3C:YSqE55dFH/7dl3S2vyKjcksDw9A0jSLe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad3d670bcb9a94220b9acb97136a70ae_JaffaCakes118
Files
-
ad3d670bcb9a94220b9acb97136a70ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 185KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE