Static task
static1
Behavioral task
behavioral1
Sample
adc2955e203317fffb671e38ecea6aa0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
adc2955e203317fffb671e38ecea6aa0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adc2955e203317fffb671e38ecea6aa0_JaffaCakes118
-
Size
123KB
-
MD5
adc2955e203317fffb671e38ecea6aa0
-
SHA1
472ad1e844717f41ba3ef12539c385e865c45e80
-
SHA256
63204fd732d807229f40a158928728bd66850228a6adf4984d08e44234602d6e
-
SHA512
85c6050a068e1de212c8d03e45569394d8f01288c08b42d703407f94bf41c052bdfff37869239725c4d8e7118675ca62eebf19c7d5d41d19d503dc29c72f99d4
-
SSDEEP
3072:cKDBzssdqRT0d32hXhUvsSZzVEkcjKf4fDnwRcKOf3lgJz5FVs:cKDBdqyd3oxcdzVjcufgM7e3lSs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adc2955e203317fffb671e38ecea6aa0_JaffaCakes118
Files
-
adc2955e203317fffb671e38ecea6aa0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 259KB - Virtual size: 258KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g7 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g5 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ