Static task
static1
Behavioral task
behavioral1
Sample
ad88d27af48030393b62b0d92cd85b52_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ad88d27af48030393b62b0d92cd85b52_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad88d27af48030393b62b0d92cd85b52_JaffaCakes118
-
Size
688KB
-
MD5
ad88d27af48030393b62b0d92cd85b52
-
SHA1
ea60f211556f7fb4b49981e13dc0867066bbaa55
-
SHA256
0353e1bd43b16d5d2692c793caa83a1c32670f602f30da641735b81b13f690c0
-
SHA512
1f8f954bb10f0c296ae51d872a479607d6911a6ba86414ae507600e79103fa7600b06312a7e1c4696b6553785a014ae8365d86da349db051ffb6873c93b2a32e
-
SSDEEP
12288:YaCqvuEt+uZr8qMpf29dWWU7u080F3Z4mxxu9A3fxBeJfk+7:YrEt+ywqMl29dsS080QmXum5Etf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad88d27af48030393b62b0d92cd85b52_JaffaCakes118
Files
-
ad88d27af48030393b62b0d92cd85b52_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 372KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE