Static task
static1
Behavioral task
behavioral1
Sample
adad9c84ac07200b86854632e43ac685_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
adad9c84ac07200b86854632e43ac685_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adad9c84ac07200b86854632e43ac685_JaffaCakes118
-
Size
414KB
-
MD5
adad9c84ac07200b86854632e43ac685
-
SHA1
b71d87944f6cc9117f203ebbcaf6a81913bc4a2d
-
SHA256
15a533eb106864f1b892b6ea0c6af81583d6de5e5cd3d411c5a8801733610987
-
SHA512
c96bddd2da0fd9eb752c4d4966cfef703078eee168bf2ff9ce44a19857825630d6eebb0db9b690ecc6ae0ab13d27d31c772adbed4d1226b29f97297331f73659
-
SSDEEP
12288:U4kKYTMAhtOj7L6p3R0u0BrbK/tVchMi+O4Km+cZyHA1:UiYTMAhtC6p3R05Brm/K/+acyHc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adad9c84ac07200b86854632e43ac685_JaffaCakes118
Files
-
adad9c84ac07200b86854632e43ac685_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 400KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ