Static task
static1
Behavioral task
behavioral1
Sample
15af1298729b522fc78f36c2abe52426_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15af1298729b522fc78f36c2abe52426_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15af1298729b522fc78f36c2abe52426_JaffaCakes118
-
Size
120KB
-
MD5
15af1298729b522fc78f36c2abe52426
-
SHA1
16dd69ad482a3864f4b904e1824fa56f4db8d13a
-
SHA256
9b602abf85563e2fea674bdaf68c252f39cfdb76d1b7181a50b1d43480ff2054
-
SHA512
236870bb542c54659f0a40ea069168649b7a0d390a170751349f3af88cfd696c6a43f98821cc463c38d4aab3cca6f05af2e0db8dd5b0fcb44f191dec088e86a9
-
SSDEEP
3072:NjYFFTDv3tYudo2yhpMi9uYOnsV0ZRMFan2YX95k36B3YD:6FFTb9Bvyhx9uY+c0ZR+K2+I36B3Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15af1298729b522fc78f36c2abe52426_JaffaCakes118
Files
-
15af1298729b522fc78f36c2abe52426_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
i Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hv Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
z9r94nk Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE