Static task
static1
Behavioral task
behavioral1
Sample
15061e535ee819ca0d01d4db4f599542_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
15061e535ee819ca0d01d4db4f599542_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15061e535ee819ca0d01d4db4f599542_JaffaCakes118
-
Size
3.8MB
-
MD5
15061e535ee819ca0d01d4db4f599542
-
SHA1
155b4e2b56c719fd3e2207794fdf3b359c9eaa7f
-
SHA256
fc7599ecf6e65b7516fe5093977a5ead13d3f545e53e4d57f824eaafbf9636ea
-
SHA512
1383a49e948cb5328d19ba0ff027bb6ac4d561924d6d3d1b11c07fb2026f418a5141f3d9a19db7592964de12fd7110f50d14f2c36c9696ee26ea20dc962854d4
-
SSDEEP
98304:Zq1UFHs3TKeYBnS+CWExXkIFa1kZB95aFB5cWm2RZ:Zq1t3Tzh+7ExXkIA1k795aKWm2D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15061e535ee819ca0d01d4db4f599542_JaffaCakes118
Files
-
15061e535ee819ca0d01d4db4f599542_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ