Static task
static1
Behavioral task
behavioral1
Sample
ad93ff4f2f70086f380949ac3c44fb66_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad93ff4f2f70086f380949ac3c44fb66_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad93ff4f2f70086f380949ac3c44fb66_JaffaCakes118
-
Size
177KB
-
MD5
ad93ff4f2f70086f380949ac3c44fb66
-
SHA1
eeaffa2f5bb77652258c760d2d3f2e90e2353c9f
-
SHA256
fb85fd2d086904c91e3331cef6c24074ef5a137a08f35915972734cab2248249
-
SHA512
ad62edb7ca3cce6a0f8e069ab70bde92845d364b8f89d98773136c260fea32c8ca8b889331dbd9e9a8c67c2cea28c7adede8eaa39c2cbbaf65bd6fa0fe92d22b
-
SSDEEP
3072:JsfO8EODT9HfiePQngDC/2G89MLfACwVvVtnd9kMX918VTC3wf+xkMv4xuQXoutJ:CfO8B1/iezDCukf7wtN38ZmKMv4jXoSJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad93ff4f2f70086f380949ac3c44fb66_JaffaCakes118
Files
-
ad93ff4f2f70086f380949ac3c44fb66_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE