Static task
static1
Behavioral task
behavioral1
Sample
ad86e658083e175c37ea11e4d20aa8d5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ad86e658083e175c37ea11e4d20aa8d5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad86e658083e175c37ea11e4d20aa8d5_JaffaCakes118
-
Size
74KB
-
MD5
ad86e658083e175c37ea11e4d20aa8d5
-
SHA1
85ec4695144d711ff60f2ea00289eafa755787bb
-
SHA256
5464588e47110aade91c8bbc19f03f2b72298e5467eaa453ef27007c383a93f9
-
SHA512
95d8c16c4bbf681ee5d93c73e90c2cb386b65703410d732a5d979f266b446ddcc3e178f89f4aec6918df5ab1d9b22fe9bbba1463263b1b929bfd5aef8d441360
-
SSDEEP
1536:WRbeAuYRZDKmlobgMz2G3XprkETUHbN6mN9OmzN+WDgTEqTyDFX3:cKAuYRZDKml072GHFkETUHbPDZzN+WDx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad86e658083e175c37ea11e4d20aa8d5_JaffaCakes118
Files
-
ad86e658083e175c37ea11e4d20aa8d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE