Static task
static1
Behavioral task
behavioral1
Sample
c15e4276c6502a6e6bf1e74d3d3ad8aa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c15e4276c6502a6e6bf1e74d3d3ad8aa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c15e4276c6502a6e6bf1e74d3d3ad8aa_JaffaCakes118
-
Size
414KB
-
MD5
c15e4276c6502a6e6bf1e74d3d3ad8aa
-
SHA1
6b439553fc4c3269a779bae713fbddbfe933a86c
-
SHA256
0e0bb9a9a946f2f71b212d7fd66587206dca43ac5ea5b03cdf9ca4eba2a17980
-
SHA512
028d5b7ed5e66a1de7a56acb752727dea65d26e441cb99c4377247161f9e9190a1865a2e5f93d627c3c90ba395433f93df3f86c829b398a6ee36772954adaa70
-
SSDEEP
12288:AzPotVQEUNc5suTyhz8diB419S5hoAS5sxekKzzq8:AzotVZUNcyb80619SvoQQkQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c15e4276c6502a6e6bf1e74d3d3ad8aa_JaffaCakes118
Files
-
c15e4276c6502a6e6bf1e74d3d3ad8aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 382KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE