Static task
static1
Behavioral task
behavioral1
Sample
15549f7e72d059d62d1a2acce53e40fd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15549f7e72d059d62d1a2acce53e40fd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15549f7e72d059d62d1a2acce53e40fd_JaffaCakes118
-
Size
18KB
-
MD5
15549f7e72d059d62d1a2acce53e40fd
-
SHA1
9dc267fff7398c54eb27dffdf9ca909ba8fe3023
-
SHA256
7da2b094a48b8977f76235c1427c3e0467a33f0991fbe5a987d1cab41db1c3cb
-
SHA512
6ec0ad6505cf8dc2d46e4edf124493366ebaeaeaf4d843086411d89695eb58cf6fefcb3120b1b0febd5691b6f27231eaa5e511fb80e79cc7c76ba7500b8ad8bb
-
SSDEEP
384:gA0000+IgrsFYmYf1HtIwjl/I7H89hn2fHTSlKiqU7b9i5dfLz:4IgXmY1OW1eHwn2fH0gUqdzz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15549f7e72d059d62d1a2acce53e40fd_JaffaCakes118
Files
-
15549f7e72d059d62d1a2acce53e40fd_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ