Static task
static1
Behavioral task
behavioral1
Sample
12615a82b5b4ef6a3283fa26dfb3c040_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12615a82b5b4ef6a3283fa26dfb3c040_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12615a82b5b4ef6a3283fa26dfb3c040_JaffaCakes118
-
Size
200KB
-
MD5
12615a82b5b4ef6a3283fa26dfb3c040
-
SHA1
a97f23691ec3f11ed1dbaa20a2d730e5eee0aa7a
-
SHA256
b41b5aa0ea4d80ec08ca866e28f02e261a87eea726b49c46c5aaf580e3722c3f
-
SHA512
3b2bd05d9671831615687ecc75f5b34436c03c74868a92faec25eeb954c20e48a79472bab2e42eb9ba1a316dd40f1a3b0f3fefd1129c15820da7d4d39f804c97
-
SSDEEP
768:3NPTxLgx8EKs+i9xWElGGeaFlJsD+jzDFT9K0t32gtKbK9qQD0AAyD9Gj4NunXr:3nLvs+iVqGJi+XhTWfbK9qQYWpg4Nun7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12615a82b5b4ef6a3283fa26dfb3c040_JaffaCakes118
Files
-
12615a82b5b4ef6a3283fa26dfb3c040_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
1B09VlHG Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yeUOiJB3 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QF9UtFQ9 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NTEZ5edd Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
si8qG67p Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
4t89203m Size: 147KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE