Static task
static1
Behavioral task
behavioral1
Sample
adfb9ef3c81a4e6b9e5847ae4a8c1a8a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
adfb9ef3c81a4e6b9e5847ae4a8c1a8a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adfb9ef3c81a4e6b9e5847ae4a8c1a8a_JaffaCakes118
-
Size
30KB
-
MD5
adfb9ef3c81a4e6b9e5847ae4a8c1a8a
-
SHA1
354a9683372935f3901cf7b1ce524c7d81367114
-
SHA256
41353f8b2ed283766e866dc1433a4e7d9e104b50e3e000d39a79920cd83ac18c
-
SHA512
ecba969b8a9f864ad10722bea245c238c249df96c0b11a19834b2c813c9378f2fa7ffe4c6c4c73a0422f33513ebf66ce7fbeb36b6cac8b53eab633a043713d7f
-
SSDEEP
768:7hayGcVdjHFGcMINl2VPdNSOfr8abAuD+OgAtYcS/CY:daHA3NMdQOfr8a5yOccSKY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adfb9ef3c81a4e6b9e5847ae4a8c1a8a_JaffaCakes118
Files
-
adfb9ef3c81a4e6b9e5847ae4a8c1a8a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ