Static task
static1
Behavioral task
behavioral1
Sample
e15ac837764ad005583bda62cf8986d9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e15ac837764ad005583bda62cf8986d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e15ac837764ad005583bda62cf8986d9_JaffaCakes118
-
Size
180KB
-
MD5
e15ac837764ad005583bda62cf8986d9
-
SHA1
a083eae873083991b2e9a9ef12a7905ea78038fa
-
SHA256
2a3a9f719c00d82338e934c83e42bf092201aedb5f9f40993652d90f953746d3
-
SHA512
e5697a105260aa5194a8869f4a92b36e50230a0f985e6fe806f3b0dd69af8b7e8b6969579ebf6f790c1b65fc3f31991f9eed9d4b260384c03c89017236c9135e
-
SSDEEP
3072:DYvWk+uIZ/D2J8FmFRydgUXRXCHx0TWNEPwthD5F4698TigvzJ18NI4A64:9TZKhsMx066w35V9DGzJYI164
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e15ac837764ad005583bda62cf8986d9_JaffaCakes118
Files
-
e15ac837764ad005583bda62cf8986d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
PD3mPT7 Size: 78KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
itvfI9Y Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Lmrqlhb Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE