Static task
static1
Behavioral task
behavioral1
Sample
0715a392aa3bdcb7bdb9fc0aae8dd6e6_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0715a392aa3bdcb7bdb9fc0aae8dd6e6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0715a392aa3bdcb7bdb9fc0aae8dd6e6_JaffaCakes118
-
Size
360KB
-
MD5
0715a392aa3bdcb7bdb9fc0aae8dd6e6
-
SHA1
ea59ae140ffe74e370b7848df9143e09acb0dc3c
-
SHA256
e8d706f4c2eb4b3988b74bf680e14cd615bd5a656f7b035dc4243f14fa3fc4e3
-
SHA512
a8b1ff8d389440ea391c5df4b26dcdc457c7bcf39c6ae1eaf29df1ae18f5c685e8dc8c4df766c1a779e9bf747d6417ea92a8d0f9560e2fa3de4cd553bfda2c99
-
SSDEEP
6144:nZ+PtQjtEIC0b9I7ZgJGNBrzYTi8Blr6FYEF8b6cl:ZQtQ2IC067GJGNBr0TR6Fchl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0715a392aa3bdcb7bdb9fc0aae8dd6e6_JaffaCakes118
Files
-
0715a392aa3bdcb7bdb9fc0aae8dd6e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.PEX Size: 512B - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEX Size: 359KB - Virtual size: 375KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE