Static task
static1
Behavioral task
behavioral1
Sample
adfad73fd2d06d79c85086d7a3aeac70_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
adfad73fd2d06d79c85086d7a3aeac70_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adfad73fd2d06d79c85086d7a3aeac70_JaffaCakes118
-
Size
457KB
-
MD5
adfad73fd2d06d79c85086d7a3aeac70
-
SHA1
54e2b68c76371578938ccc0237f06b79a9871d6e
-
SHA256
e0a9374c1ce06e98763ad7ec1ce4be162d405465f4da6d15ef33e2c2b4c0bd44
-
SHA512
f3ce28353eb97808f76210d155af3f322b93977f8543ce314e241799598e5c71b08252295369fe8197367ff856a7101705b20a99b9f706172d9476cf4ab2484c
-
SSDEEP
6144:cRZ/1bwptU7jaWndqMzNS0kN7l7tqo7GMBhde1m/XPaKuUEn2iCXKk:4Z/BytU7mecL/JTvdWKpw2zX9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adfad73fd2d06d79c85086d7a3aeac70_JaffaCakes118
Files
-
adfad73fd2d06d79c85086d7a3aeac70_JaffaCakes118.exe windows:4 windows x86 arch:x86
573d992bf9fb18b9fba2387f964bb711
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
CharNextA
oleaut32
SysFreeString
Sections
CODE Size: 152KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE