Static task
static1
Behavioral task
behavioral1
Sample
15546be08344c31cf3fefcae8b4c3889_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15546be08344c31cf3fefcae8b4c3889_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15546be08344c31cf3fefcae8b4c3889_JaffaCakes118
-
Size
66KB
-
MD5
15546be08344c31cf3fefcae8b4c3889
-
SHA1
7efe08740082011c3a7b272980f7e7516a868643
-
SHA256
cb8ef1a8b28644b67267a6aca98a4d693c085eefb27c564bf7e0579a1f68beea
-
SHA512
72058d71181c257d2658ce363a87711fd1cd6c2f7fade090d2d44f7d367e51dcba632e249c12d526aa179aee7d028dc2ff0274426d09d1cf46e4d7cf3ed960ed
-
SSDEEP
192:HKxx5IafziCdtfJGHVwgzHASAC14Cngr0CpyA5cipdGdxz8gG:qxx5dfzB01XjAO+AgP4cmi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15546be08344c31cf3fefcae8b4c3889_JaffaCakes118
Files
-
15546be08344c31cf3fefcae8b4c3889_JaffaCakes118.exe windows:4 windows x86 arch:x86
3cd3aba06a71a3fd4726d5e3e8f25b85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
ExitProcess
Sections
.text Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE