Static task
static1
Behavioral task
behavioral1
Sample
ad5f4e1b2f79d5a70475f0c594ef466d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ad5f4e1b2f79d5a70475f0c594ef466d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad5f4e1b2f79d5a70475f0c594ef466d_JaffaCakes118
-
Size
271KB
-
MD5
ad5f4e1b2f79d5a70475f0c594ef466d
-
SHA1
b473ab99b9bdbeceb746a957cabaf75cf221a284
-
SHA256
42672c577fb64dbb0f5e795bfa4438b4d5d5b05fd128a581f245c24d9faa9258
-
SHA512
8b7c9c03dc325d0c8a8347558ad32034d3acf8cac0006df0416a90c3fd2a600f23dd3254fdcc239abb426d4638c2c9635ef48f3854d80c1c0297a07362fecb04
-
SSDEEP
6144:ow0chjUG5bSEStCAA/aYA96Gi8bbUlejZNYSUJ4nLBFGz/YdG/6d3:a4j/qHYOBi8bbUnJSnLBG/Ydbd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad5f4e1b2f79d5a70475f0c594ef466d_JaffaCakes118
Files
-
ad5f4e1b2f79d5a70475f0c594ef466d_JaffaCakes118.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ