Static task
static1
Behavioral task
behavioral1
Sample
15b2e4797e5f59c2d345ad4e595a7db9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15b2e4797e5f59c2d345ad4e595a7db9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15b2e4797e5f59c2d345ad4e595a7db9_JaffaCakes118
-
Size
124KB
-
MD5
15b2e4797e5f59c2d345ad4e595a7db9
-
SHA1
963a9edd841dff207d474c033dbfc90f0d1e3fa6
-
SHA256
d65a1fd32f7d02e702c58feaea0c452e90b2e19dfe62bf33893a8b6118db2344
-
SHA512
44d71cfb716f3e20155d16573bf4aaceadb44e6a91e9e41a5576515e4cafe4bc0b471e6ecb79ffe63c47f41dbdab94464f91b8981f89f79f7184ad3d03345a9a
-
SSDEEP
3072:q82go+AOlrpnR85k2GXDcEgGIxMstdvkxBTFfqADki2DObDZA:+dwlrRaPCDcEgnTvqTIAYieOv6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15b2e4797e5f59c2d345ad4e595a7db9_JaffaCakes118
Files
-
15b2e4797e5f59c2d345ad4e595a7db9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
whz40 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
whz41 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
whz42 Size: 364B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE