Static task
static1
Behavioral task
behavioral1
Sample
ad526167e222abfafe50e00ca4df9f3b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ad526167e222abfafe50e00ca4df9f3b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad526167e222abfafe50e00ca4df9f3b_JaffaCakes118
-
Size
70KB
-
MD5
ad526167e222abfafe50e00ca4df9f3b
-
SHA1
eeaf2f1ffcd65299a5ffeff333a2d52193d03db0
-
SHA256
f12e5ff2a7c6971b7d3b9ef92a544c82268e8343fe56d5485dc37014990e21a4
-
SHA512
0e1921cdaa8eab0b750a5ad549746340bbb19127d18c7342a49de40cf67fd1e37d5e5ab0798bccf679691b38043be1d5dcfe2e99b99e3e8ac42b0c691e12ea9a
-
SSDEEP
768:EsJhM/47dTkc8jmiG/7H1SE3KGdA6jVS2bnKHtIGA8/nVNEcoX7zPjqEN5Oi:EAA4R43e/7VOEjs2FRP2ER
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad526167e222abfafe50e00ca4df9f3b_JaffaCakes118
Files
-
ad526167e222abfafe50e00ca4df9f3b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ