Static task
static1
Behavioral task
behavioral1
Sample
7415eebba3a18628d628ac3435587e2d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7415eebba3a18628d628ac3435587e2d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7415eebba3a18628d628ac3435587e2d_JaffaCakes118
-
Size
43KB
-
MD5
7415eebba3a18628d628ac3435587e2d
-
SHA1
3bd5326d9a29fd6cc8a5c471746a0dfdcad74170
-
SHA256
fa13cc131b67b9c2fca2047f195e7aac25dd5997fffb5b15e67fe226fab36aa6
-
SHA512
e71f93b9a805883a7bbbf31a7105ff275cffd7a46c1d8fb09da64e64a7981a32db231527eb3a4842ff7a4db6d109cb3abb2699a6a3bd6aa4784719557863e3be
-
SSDEEP
768:AWvTOcljDjUy3YUwACR7JSYHIMuzyJZoUZiQ8gRYexh0y0NN5VgnNSVVyCS:AWv6clrUipCR7J9/ZZZ+Qvxh0y0H0SG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7415eebba3a18628d628ac3435587e2d_JaffaCakes118
Files
-
7415eebba3a18628d628ac3435587e2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ghlz0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ghlz1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ghlz2 Size: 897B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE