Static task
static1
Behavioral task
behavioral1
Sample
815056a162942fd7d7c0d86e8ed4c424_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
815056a162942fd7d7c0d86e8ed4c424_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
815056a162942fd7d7c0d86e8ed4c424_JaffaCakes118
-
Size
1.0MB
-
MD5
815056a162942fd7d7c0d86e8ed4c424
-
SHA1
15267412b27ddd2ac0bd34ef00dd1c37b6c5ea60
-
SHA256
12d2be6ff62f4bd7b3c450f9906348a6749268d52e6a687f0ef7b6f2da9ce5f2
-
SHA512
bbd3925bba96a4fe9c4ba5b50b6915696a614766436d12af777b0e2f1ca1fcdd0c9548720fb291045f69b508680bae43eb474ebd2d0cb356dfc9a800ebab170b
-
SSDEEP
24576:zJ9YCBKOyR/0jy9Oj0RcQtKqahqQcioE+56SKFDZ8LDTa1/:Nmms/oj9QtKfNeR6SKdZ8nc/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 815056a162942fd7d7c0d86e8ed4c424_JaffaCakes118
Files
-
815056a162942fd7d7c0d86e8ed4c424_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.tet Size: 24KB - Virtual size: 21KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE