Static task
static1
Behavioral task
behavioral1
Sample
b7ada744428139ab5fda2ba75c9603f5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b7ada744428139ab5fda2ba75c9603f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7ada744428139ab5fda2ba75c9603f5_JaffaCakes118
-
Size
2.9MB
-
MD5
b7ada744428139ab5fda2ba75c9603f5
-
SHA1
a6504e190f0d38ccfd61b7bf266d3252fbb40e43
-
SHA256
5a7656388be32251a10f6d2d26551d8026e4d64521bb90ab7afe7e83e6049a00
-
SHA512
a933077a28e8572aff8f2f1d3a3234bba54e8ae683cd91957b09e856a2e2e82eb64f3e6ba064153956ae534cc66a3a8dd3c5f3eed2e9d1b9c528f662acccc0a2
-
SSDEEP
49152:+x2MzpkHFz8mzqa/AZzJ8w/0fUosv9qVSCB92dM61fUpbNx0g6Sbos70u1O3wJy3:+DklztTKyw/sUosFDM2RcpH0/s7T1Vy3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7ada744428139ab5fda2ba75c9603f5_JaffaCakes118
Files
-
b7ada744428139ab5fda2ba75c9603f5_JaffaCakes118.exe windows:5 windows x86 arch:x86
bec5b4c4b7a984e1d738d81a5d651e62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 rasapi32
lstrlenA S�2
Sections
.text Size: 1.1MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ