Static task
static1
Behavioral task
behavioral1
Sample
15c9172e472b4701beccbd11ec167a07_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
15c9172e472b4701beccbd11ec167a07_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
15c9172e472b4701beccbd11ec167a07_JaffaCakes118
-
Size
3.5MB
-
MD5
15c9172e472b4701beccbd11ec167a07
-
SHA1
f0b90dc075362ec198e88aefee125f1d3641135f
-
SHA256
be89d9392276ad25a7f9464d4cb89d9c68d0286bfad6201330d4a0caf8be5961
-
SHA512
e007e415409e0336b56c60157624719bed3a22ff0cd6b008263d7f10b1b89f3114dd76a697eb8f8bae8c3bc44ddf49a890931bb36a22dd897559c51e3213624f
-
SSDEEP
49152:zvx9f7v9MchbuRKwpBReW4SkZP4sz9MbHoJdXN0BMOwLloBrug/wnNTBf:t979BHSfkZcIJdXN0B7+sWh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15c9172e472b4701beccbd11ec167a07_JaffaCakes118
Files
-
15c9172e472b4701beccbd11ec167a07_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ