Static task
static1
Behavioral task
behavioral1
Sample
15e98c4617a45490c370a8754c8e3c81_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
15e98c4617a45490c370a8754c8e3c81_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15e98c4617a45490c370a8754c8e3c81_JaffaCakes118
-
Size
112KB
-
MD5
15e98c4617a45490c370a8754c8e3c81
-
SHA1
4803d70ff8a180e96ebf86069b8c57d6c850039b
-
SHA256
9af62a62e2255fd568fca2e8e7cfede38087bdee9ae9e1b94174fadcf0274422
-
SHA512
85c4e7e948ab39773946235817ba6f92ad7396ca8ad83ea0570be23f4220eda8f7a7e65b07fb05ba1b81e6e3e5213aea18d2b5c3bcaecc211725543fb43cfb85
-
SSDEEP
3072:qTXmftGKSMD7ZMMY4q2YLa8zTh3/QSTu/:xxDmda8nek
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15e98c4617a45490c370a8754c8e3c81_JaffaCakes118
Files
-
15e98c4617a45490c370a8754c8e3c81_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ