Static task
static1
Behavioral task
behavioral1
Sample
ad38f64a1dd79ee4635a9a2f8b15c7f8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ad38f64a1dd79ee4635a9a2f8b15c7f8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad38f64a1dd79ee4635a9a2f8b15c7f8_JaffaCakes118
-
Size
14KB
-
MD5
ad38f64a1dd79ee4635a9a2f8b15c7f8
-
SHA1
66975c7182a81f265beb11a7ae88d8ed123ac41e
-
SHA256
bbf69dde3c4cd4477b7c5454cde1aac4f55f5a2be404d2535d5db20f665173c4
-
SHA512
ec2d7a0b4c0522a29f6b4253ef8c4081f7c46f61e38716b30768b74783508c6da636632eccbf7d97aca6eba9ce8b843ff0d347ff811eb36aaa80ec48dd8ca594
-
SSDEEP
384:AWtMWKVbZb7Oferu2vDmlbV1iXNZCLfm0tEGR4w9:zgFIf6u2Y51iXNZL0tEGRz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad38f64a1dd79ee4635a9a2f8b15c7f8_JaffaCakes118
Files
-
ad38f64a1dd79ee4635a9a2f8b15c7f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ElS0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ElS1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ElS2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE