Static task
static1
Behavioral task
behavioral1
Sample
b215f1b0abdb9bb1d50998d85178b099_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b215f1b0abdb9bb1d50998d85178b099_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b215f1b0abdb9bb1d50998d85178b099_JaffaCakes118
-
Size
1.4MB
-
MD5
b215f1b0abdb9bb1d50998d85178b099
-
SHA1
af0b959792ea68533dbb2f6753dc1593dbf05bd1
-
SHA256
e1ceb0517efdf89dbbbf31d0d85e0029a444c2d40514f3962db91f85cf5baa5a
-
SHA512
f997783a25422f56de492fdd80e8d06a129e9011ccc9209c5b4004788e51042d65221246356fc02cd4f4db88029282776595a16717fa732a3d55f6acbc7d35af
-
SSDEEP
24576:Ae2FBW5A5qEIgxjZaIPoCFiKNvTMmoU55g9LFKKYHjKzZdVprbvExIrT8ko6up7:AuydXxr09LIHGzTAxIrRu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b215f1b0abdb9bb1d50998d85178b099_JaffaCakes118
Files
-
b215f1b0abdb9bb1d50998d85178b099_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE