Static task
static1
Behavioral task
behavioral1
Sample
15b191b85299fcd251d94d3623d5dafc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
15b191b85299fcd251d94d3623d5dafc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15b191b85299fcd251d94d3623d5dafc_JaffaCakes118
-
Size
35KB
-
MD5
15b191b85299fcd251d94d3623d5dafc
-
SHA1
17be15a43f0e5d781540d0c9b6cf42955217ec54
-
SHA256
bc1f26f0f9e5fc15b7b77076b67e50cc256a8e454d14ccf4a2accb1c644de422
-
SHA512
9fead4d67f850c7ab38a5f02ff80f9ebb08c7f1723caae1544a73b10b7e511dea47223d025c583c10b4544288fd8617e13a3d4777c552821f302b4fe3f62feb4
-
SSDEEP
768:iv016kfdAItZ9r5pdQROq7KDkg+mjY3HQA/iEn6TsElp:iv011fyKZ9VpGL7KQwE/qqusElp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15b191b85299fcd251d94d3623d5dafc_JaffaCakes118
Files
-
15b191b85299fcd251d94d3623d5dafc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.khmioxk Size: 28KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.apgsguf Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE