Static task
static1
Behavioral task
behavioral1
Sample
addc8ae0c9c28ddb1b59de7bbe07eac1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
addc8ae0c9c28ddb1b59de7bbe07eac1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
addc8ae0c9c28ddb1b59de7bbe07eac1_JaffaCakes118
-
Size
227KB
-
MD5
addc8ae0c9c28ddb1b59de7bbe07eac1
-
SHA1
278e38957f4267a3b24f8c6192dc11d0847ab589
-
SHA256
cb817009312bef2833e7081136751b37998e1e4eda5d092a3a2778c65471ecef
-
SHA512
1b94ffec9039f19fbaadb2d62c7a5e6fe67b881b7a7d57258a26bfae3852d022875d53cdb059ebb51de9b33855e0bfd73317637c484eb3cf28ac6ba78d9e5323
-
SSDEEP
6144:XeyPeTqNnoAARQ8DKNgg+wcFSzSf5GWh:XeyPeTqdoAV8DKNgXwGSzSH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource addc8ae0c9c28ddb1b59de7bbe07eac1_JaffaCakes118
Files
-
addc8ae0c9c28ddb1b59de7bbe07eac1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ