Static task
static1
Behavioral task
behavioral1
Sample
7515a4a643fe365fc1e301f9784f4aba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7515a4a643fe365fc1e301f9784f4aba_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7515a4a643fe365fc1e301f9784f4aba_JaffaCakes118
-
Size
116KB
-
MD5
7515a4a643fe365fc1e301f9784f4aba
-
SHA1
737b5f6de19810db9f661e4d4f079202ecb7b94a
-
SHA256
480c3decb0c854c3146e2042280739cc33f173b0038dbbe3ce42b480f000827c
-
SHA512
3708fa4e56d9a549fc4c864464ca985adc5f9653e4c0d86851928edd363482faaebaeae822ad417dcbdf8f8f4fc13e691c2771ae819394d945ecfb9ea3b0de92
-
SSDEEP
3072:S2Tk+iSbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU77PWuv:9kl8wvP6bQ7yMP+DE8277PWi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7515a4a643fe365fc1e301f9784f4aba_JaffaCakes118
Files
-
7515a4a643fe365fc1e301f9784f4aba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xXx Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE