Static task
static1
Behavioral task
behavioral1
Sample
a15ecd9eec6406e6bdb7d99cc8e29aab_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a15ecd9eec6406e6bdb7d99cc8e29aab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a15ecd9eec6406e6bdb7d99cc8e29aab_JaffaCakes118
-
Size
1.9MB
-
MD5
a15ecd9eec6406e6bdb7d99cc8e29aab
-
SHA1
5356d565052c58438124f9cbe017dfedfa650b5b
-
SHA256
71258c3680276c3842e51ca0bc493b2205ae3c18de6e8f7b02f127635b9bb962
-
SHA512
6605a69085c6d179692ea47a75ac9eb8420ff40e416041cb13b30fe927a9f8e301fc30b98945c2d64ff6dca8580ffe2c629f982794f5c52654ee40ee0915b41b
-
SSDEEP
49152:hXpgqmwLXS87HlUiPtOlOU/p6HU2ua0kopamTAPl0:hX+sXS8eilOAwqOjpan6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a15ecd9eec6406e6bdb7d99cc8e29aab_JaffaCakes118
Files
-
a15ecd9eec6406e6bdb7d99cc8e29aab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 841KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 44KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 613KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
11111111 Size: 383KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE