Static task
static1
Behavioral task
behavioral1
Sample
15886aa2cf04830caf6b3639d9976a80_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
15886aa2cf04830caf6b3639d9976a80_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15886aa2cf04830caf6b3639d9976a80_JaffaCakes118
-
Size
135KB
-
MD5
15886aa2cf04830caf6b3639d9976a80
-
SHA1
d22d3410f56bc51884f8b62a55275c809cc45f0e
-
SHA256
255ba35b1116a7c7b7328b92b2dd073a6d576b55d645e2bba5c1ff494187ceec
-
SHA512
00ff6ad72ef474c734363c1df9517d5448fb94e65d03ae4c7c2de9c19fd8f6f9d1dc26ab4a64ab3b9cd7587f724360013c6ecd3813a9a086ca2c455b403d3098
-
SSDEEP
3072:SiZMoxAThopUlThHmr15RT9MEj+mS2q61uk4TYvjx6PgAmFlout:SKMoxmGpUvGZ/9Rp261u8jx6YAEoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15886aa2cf04830caf6b3639d9976a80_JaffaCakes118
Files
-
15886aa2cf04830caf6b3639d9976a80_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 134KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE