Static task
static1
Behavioral task
behavioral1
Sample
b2ade9a9dfa56b62d06702dfbcd16d7d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b2ade9a9dfa56b62d06702dfbcd16d7d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2ade9a9dfa56b62d06702dfbcd16d7d_JaffaCakes118
-
Size
136KB
-
MD5
b2ade9a9dfa56b62d06702dfbcd16d7d
-
SHA1
269fa68c645d5b586ee5e622c667f44bf5b7bda4
-
SHA256
c1ca45a1a2f895d87bf7c8dc5537442341de40e93dd17f19dce11b1e383a5700
-
SHA512
998002fb4f768dd2bc7d7e785c0515071cdfbf3fe36ca3de5c5b0a35c8d1cc394cdebf834e216bb094a22a92efa3b8f4afc99b8a5ae2ebfc885a1d0b3ea8b229
-
SSDEEP
3072:HcY2MnUstI5Ag7O40TqzMwvmjw5emJYSu+RvNgUI:Hv2mt+/7OdThwus5emGS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2ade9a9dfa56b62d06702dfbcd16d7d_JaffaCakes118
Files
-
b2ade9a9dfa56b62d06702dfbcd16d7d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ