Static task
static1
Behavioral task
behavioral1
Sample
adc6fd695ee26eeee6c4151a92eda1ab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
adc6fd695ee26eeee6c4151a92eda1ab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adc6fd695ee26eeee6c4151a92eda1ab_JaffaCakes118
-
Size
76KB
-
MD5
adc6fd695ee26eeee6c4151a92eda1ab
-
SHA1
7945920ad3a1f8e773a3fd3bd67cbc90fb0a6860
-
SHA256
a3dcf739b046036b29a9b12a1759158a7da7a9324408715f44a88e3cb7a0bce0
-
SHA512
6435f1e950ed1ad3af9c7d0fb3c81c9095f898b535b4a70780bd1eb4cd591c80d0c1d22fce2b3f51ce705d2a6a3d5fa927ee68247e1ec9a96338d58e2e813e19
-
SSDEEP
1536:2STVCTAoSB36zIUcaFMqX/MWbeAO90dLGmehSaojzpjVrs2ryrd1vUQuq6:bTVCTA536pRF3MeFOgMhSHnHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adc6fd695ee26eeee6c4151a92eda1ab_JaffaCakes118
Files
-
adc6fd695ee26eeee6c4151a92eda1ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
4753860e71ba4d49d96f21e1f4485cc8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugActiveProcess
SetClientTimeZoneInformation
GetCalendarInfoW
SetProcessShutdownParameters
VirtualFreeEx
DefineDosDeviceW
VirtualFreeEx
BaseQueryModuleData
FindFirstFileExA
GlobalWire
LZSeek
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE