Static task
static1
Behavioral task
behavioral1
Sample
15ea0fc8dddac68cbdeef3c684ab4486_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
15ea0fc8dddac68cbdeef3c684ab4486_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
15ea0fc8dddac68cbdeef3c684ab4486_JaffaCakes118
-
Size
29KB
-
MD5
15ea0fc8dddac68cbdeef3c684ab4486
-
SHA1
f7ebed186c88023d905e99ee892d78be60ab48d5
-
SHA256
fcc10a73e5f9c09f6b6b8ec8f55da3687b2a1b22d3d8fc2e11fb9c69fdce9514
-
SHA512
5889a5ad7a95d90ab1ae3dfb5571f1da79257c1bcd9b2a43d128c4dd13917c340e77ad513f95047d6ef1aaec829a128c10818bf49061d24c63d19dd2826f8c9c
-
SSDEEP
384:mvEKDnnvTumGOuJDWPG37Y+CVmlsLCeO1JGv/FCSk98iG7TbcIrqJxTIp8UHmkuM:gjcWPGnl5NLGvtrXiq/Vqq8UGk3PeI/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15ea0fc8dddac68cbdeef3c684ab4486_JaffaCakes118
Files
-
15ea0fc8dddac68cbdeef3c684ab4486_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: 401B - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 59KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE