Static task
static1
Behavioral task
behavioral1
Sample
adb64310c1a01d3e3943ee6c5cc1e092_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
adb64310c1a01d3e3943ee6c5cc1e092_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adb64310c1a01d3e3943ee6c5cc1e092_JaffaCakes118
-
Size
1.5MB
-
MD5
adb64310c1a01d3e3943ee6c5cc1e092
-
SHA1
8a3644523d9f1e7f1493c9afa08bd07af13950d3
-
SHA256
0c0334c330285f0638fa40b68df1624680430ddc04efa231ba973e0a587440f8
-
SHA512
65f32ce1f54d61a9cd0888420af4d8029d4d06e544cbf96251a6911a2e1946c57f9ed2f2f91ec631278cd7e5d1c86f437e79ffd89df06e835e2e74edbd7f1ed0
-
SSDEEP
49152:+TBuBkxhfnteAuhfOFIcPdu35u3qpImZlSJcHKpK2oD:ouBkxyP6LPdnKIVJkKpLW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adb64310c1a01d3e3943ee6c5cc1e092_JaffaCakes118
Files
-
adb64310c1a01d3e3943ee6c5cc1e092_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
fave Size: - Virtual size: 15.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zkwf Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE