Static task
static1
Behavioral task
behavioral1
Sample
ade4dfe23d87945c882bde04caf34d4b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ade4dfe23d87945c882bde04caf34d4b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ade4dfe23d87945c882bde04caf34d4b_JaffaCakes118
-
Size
42KB
-
MD5
ade4dfe23d87945c882bde04caf34d4b
-
SHA1
dec8c693903f9d0d4c462f50c2b9740ba8b945d0
-
SHA256
2f60a515e554d7d70285f55ca5741b8ecf6b398b2a439c84f4f6d99ae8af9a71
-
SHA512
b7aad063f1983986ab91404c4445c193dbe3c546b9caf6345c39bd2a23c951ffaa2bd8814b77e36f547beaf8abebed7396f86d2aa9b1b0f6996d6db3d338108f
-
SSDEEP
768:9aix1YAT2FzpXaDKJrlSRDV7LzcPr2MA0F9d5bonPXirmrmt1Tj:hlqFzbTKrcPr2MjLpmkh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ade4dfe23d87945c882bde04caf34d4b_JaffaCakes118
Files
-
ade4dfe23d87945c882bde04caf34d4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 38KB - Virtual size: 11.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE