Static task
static1
Behavioral task
behavioral1
Sample
c15bba9fc1f8029a327c44e6d9e67d0b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c15bba9fc1f8029a327c44e6d9e67d0b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c15bba9fc1f8029a327c44e6d9e67d0b_JaffaCakes118
-
Size
326KB
-
MD5
c15bba9fc1f8029a327c44e6d9e67d0b
-
SHA1
8fe13e4d22ef9a40158a403b46e531ea9eb88bc6
-
SHA256
8b3be3a4a4450ddf30fcee51f0b11b54d0635014c20fb4f91456eb0b83b3b7e0
-
SHA512
bf7791e27978a76aa3495911ac390f88ff87068ca76b58bb68b0b8aae252f75d3812bf3f44e93e6b062dc24dc9d332d4afea76bbd81fb13765a71068650a6282
-
SSDEEP
6144:MjyC2y/Xi4/GuE/qDI9y2hp4sQFW4MxmDRTaUJOag/TbhGiTdS:M4y/y4/GuE/WaBhpUiKTmRXhGW8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c15bba9fc1f8029a327c44e6d9e67d0b_JaffaCakes118
Files
-
c15bba9fc1f8029a327c44e6d9e67d0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
IGLQ Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TOHF Size: 321KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE