Static task
static1
Behavioral task
behavioral1
Sample
15d5556414c81647885b712eb1a3e1b7_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
15d5556414c81647885b712eb1a3e1b7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15d5556414c81647885b712eb1a3e1b7_JaffaCakes118
-
Size
275KB
-
MD5
15d5556414c81647885b712eb1a3e1b7
-
SHA1
130522e71dd2720924f0aa46f7eb7ceed5ed7ec7
-
SHA256
7348fc52a1fa20256933c75a018f67a69e2c68f5595f159102d83a299f36fc12
-
SHA512
a28b499f0ce7c62ba294bfd466c00956c8f5ba0dea4098f3ad19b4652463e8557d18a5a5d9ee9507874bd2cbfad1d2103aa7dc10c9d63102586a33e28dffa5e6
-
SSDEEP
6144:fz0AL01GYl5xnjsJ6jV/phkfBAUOMC1/trYtgpDtGLmsvOeGFWWNGDAa:IAo1f59s0jV/phEh+/t8gpwL7vpgj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15d5556414c81647885b712eb1a3e1b7_JaffaCakes118
Files
-
15d5556414c81647885b712eb1a3e1b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
���� Size: - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�;�� Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�l�� Size: 94B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BaiduHI Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SinaUC Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.360 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kaka Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE