Static task
static1
Behavioral task
behavioral1
Sample
adceda7849f26941794ecca06185e038_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
adceda7849f26941794ecca06185e038_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adceda7849f26941794ecca06185e038_JaffaCakes118
-
Size
271KB
-
MD5
adceda7849f26941794ecca06185e038
-
SHA1
669956b3495663da9514e0ff0a78c548920e0cc9
-
SHA256
d2ad9c3a7eea508e3a70de3958e51aa6c7a9d4055de7d416ec99c6823af9c4f3
-
SHA512
6ccd252c4ba9d83a32e4ce30b7a64fd10f402543180dd9112f6bd7cbd454e5c61d3560728838af1f07f18bb7fc8b43838b2d5e102007b4f592e9dc9349e879bc
-
SSDEEP
6144:lOjCc+P/CEjCt24U0d/WbsYdLOJId3yec769/cB:lOuc0/hb4NFYdc6iec769kB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adceda7849f26941794ecca06185e038_JaffaCakes118
Files
-
adceda7849f26941794ecca06185e038_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 168KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE