Static task
static1
Behavioral task
behavioral1
Sample
15dd62e0ffdfda1198753a7dedbddd56_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
15dd62e0ffdfda1198753a7dedbddd56_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15dd62e0ffdfda1198753a7dedbddd56_JaffaCakes118
-
Size
277KB
-
MD5
15dd62e0ffdfda1198753a7dedbddd56
-
SHA1
67f99b38bb1571d07a08a537dc7cfd523034d491
-
SHA256
4585a18ea286cc4ce6fadeedfd39cafbf9ffcc200ee8b728af34df388d34e9ec
-
SHA512
1fe463f0d44c4b89eea706ae19f01413c54cdb16e10b3c68088f8f1b186110587d6d882aedb2eda7da998ce44308735cbf577945b0908255caa115453d45ba21
-
SSDEEP
6144:qxuM7sCP5BXmTFMVBoe6ScftcMPSLVmIRG:qM+sCBW5M/oe6S2txLIRG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15dd62e0ffdfda1198753a7dedbddd56_JaffaCakes118
Files
-
15dd62e0ffdfda1198753a7dedbddd56_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fgh.mfah Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sb5b9omw Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
r7fklvv. Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ