Static task
static1
Behavioral task
behavioral1
Sample
15bbf8adc676e117c735a58e0d1bd8f2_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
15bbf8adc676e117c735a58e0d1bd8f2_JaffaCakes118
-
Size
486KB
-
MD5
15bbf8adc676e117c735a58e0d1bd8f2
-
SHA1
fbd99a78f7105ab33910eda7ba7331f8564224de
-
SHA256
3948b834b41a9c2e6422abae1c5a8c29381b8cf6f1d0f7ffb83183941a7666ae
-
SHA512
cd485a7657e6a19c5bf282a3e7b1d49fb2ae05b23157b1e0dabc9b1315792c3a94204a7960f6f12c89dfc6784bfe207ca2c6ce1e86fee1abc8ce512b80de858d
-
SSDEEP
12288:ePjPUJMlNPhnBRFpazOc/0EYafdG+KlBo5D7Sy6BQ4+Se:ULUJMHPhnBRPazOc/0UFG+SowyWb+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15bbf8adc676e117c735a58e0d1bd8f2_JaffaCakes118
Files
-
15bbf8adc676e117c735a58e0d1bd8f2_JaffaCakes118.exe windows:6 windows x86 arch:x86
63ac7c2799723925dd310860701c20d0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
advapi32
GetUserNameA
comctl32
PropertySheet
Sections
.bss Size: - Virtual size: 236KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 134KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 350KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE