Static task
static1
Behavioral task
behavioral1
Sample
adad95b630c569d1106edbcec0cdc678_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
adad95b630c569d1106edbcec0cdc678_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adad95b630c569d1106edbcec0cdc678_JaffaCakes118
-
Size
275KB
-
MD5
adad95b630c569d1106edbcec0cdc678
-
SHA1
869d0ddb045911164b06535cfc8d7ff53f7a1561
-
SHA256
85701c780d709fe8cd10384ffc713e5d35494bf4a3fa275884f8dd8399bf1ee0
-
SHA512
d283cd7438a6f59aa1c2761aee17ef1a8206abe29638ba8218ce5669102fe7efcb038b6b2d3da4ed4ffbdecbe40a17882867487e460c94fea4fa11a203669d8c
-
SSDEEP
6144:5vQmMo/ToUatMubNawb9VOExRCiMOEoA/zPqGjfRpo:NQlWToXlbswb9VOExxLEB7PdfRp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adad95b630c569d1106edbcec0cdc678_JaffaCakes118
Files
-
adad95b630c569d1106edbcec0cdc678_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 36KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 33KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE