Static task
static1
Behavioral task
behavioral1
Sample
adad4368476275344e5cb349aec72ff6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
adad4368476275344e5cb349aec72ff6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adad4368476275344e5cb349aec72ff6_JaffaCakes118
-
Size
17KB
-
MD5
adad4368476275344e5cb349aec72ff6
-
SHA1
a02a3e50920cc30df2a710824627ba5d04cde7e5
-
SHA256
753ecaa724a93c3e6db73de64beeb1b032ff9b1fbf5c7b01babcc0567e00e342
-
SHA512
b381e9e4f0be68dbfce6d05374f621b53a1fa3ee8d65859665e10f5d602a525bb9d73a479e39b5a80e0a9e6a1abcead6d6bb47f8c8045d89b74637fbfd93a2b2
-
SSDEEP
384:mVW/WxmfGOu9re1SkrV3kh77UJQDI4RSsQ4Ws9d:VfceV37adQ4Ws9d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adad4368476275344e5cb349aec72ff6_JaffaCakes118
Files
-
adad4368476275344e5cb349aec72ff6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
R�0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
R�1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
R�2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE