Static task
static1
Behavioral task
behavioral1
Sample
153e335f4e5dedd62fb995f3b4fd218f_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
153e335f4e5dedd62fb995f3b4fd218f_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
153e335f4e5dedd62fb995f3b4fd218f_JaffaCakes118
-
Size
289KB
-
MD5
153e335f4e5dedd62fb995f3b4fd218f
-
SHA1
dfdf704ea51d90bcbd67646dc9fcb88ffc2a147e
-
SHA256
15c6ef7523dac172d05a2f93346249ca22fc9530a6d15ecf59d4a01fe4547fb1
-
SHA512
f0d7c72ce3d489b53a967bb7baad5d60ad3d51a765647111234d078b3c04cf6c16731b2a87302728ea6ef93af3a0711b834ead8cdb127bf73eadf886e6d2afdc
-
SSDEEP
6144:R+fS2zSk7Uzw0fQEUKTj+IDLhxQSpEsspI++K8NDBy9JMtf7VT:QfSnk7j0IsTqgcS+sspIVNQJMtf7R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 153e335f4e5dedd62fb995f3b4fd218f_JaffaCakes118
Files
-
153e335f4e5dedd62fb995f3b4fd218f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qnk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE