Static task
static1
Behavioral task
behavioral1
Sample
ad89ea008aa75fc581be4ca37ac38de8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ad89ea008aa75fc581be4ca37ac38de8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad89ea008aa75fc581be4ca37ac38de8_JaffaCakes118
-
Size
632KB
-
MD5
ad89ea008aa75fc581be4ca37ac38de8
-
SHA1
afdd93b46a6a7c72ecd4258d8c8103cc051d7d1f
-
SHA256
9d40ca533f7ef7dd50bd543020f1b876f4631548eb0b572f1d4f85621d8985e1
-
SHA512
e5409122526ff922b9a72f59fd60f1eb6c883014aaf6a6b37417f1c87dfbdad6ff3a9e02eee5a64446e12e53e2f81f1030eaeaac4170d1efcb0ce32d3871e1b4
-
SSDEEP
12288:iCJdFFjGSzKbPHcYcQJ45IoTsx2smF3Z4mxxJDqVTVOCJ:zXqMKbcYcQKeCsBmQmXgVTzJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad89ea008aa75fc581be4ca37ac38de8_JaffaCakes118
Files
-
ad89ea008aa75fc581be4ca37ac38de8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 275KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 332KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE