Static task
static1
Behavioral task
behavioral1
Sample
15765b4e190b687fe83ef5a987780d27_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15765b4e190b687fe83ef5a987780d27_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15765b4e190b687fe83ef5a987780d27_JaffaCakes118
-
Size
260KB
-
MD5
15765b4e190b687fe83ef5a987780d27
-
SHA1
ea4fc8ca2eba41aace13d6d2aecade6ddbe00320
-
SHA256
e8a497584a399eb17ea13ae53d9f186b78a50f3d06f1e366ee6a0a3de9fe2cb3
-
SHA512
ab26905ac210f783f3c0c87ca458992741270c3e81aa56fba510074cf5032e1ec76132bde7fc4119a5bcf62bef002d01f074f34029ab79e58d4df8a3b1383ea9
-
SSDEEP
6144:wkIged1XPoBQfFMhIxsGWoXnuUEF9GCpiQxEd9hfT:wkIgevoia5kX/itE9p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15765b4e190b687fe83ef5a987780d27_JaffaCakes118
Files
-
15765b4e190b687fe83ef5a987780d27_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
gMicOctT Size: - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c3StuQZQ Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
1cXcRBEl Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
o3c3ce55 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wfVy5vOB Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
1cXcRBEl
-
c3StuQZQ
-
o3c3ce55
-
wfVy5vOB