Static task
static1
Behavioral task
behavioral1
Sample
15959a3f07d11ef6685decdbea877bf4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15959a3f07d11ef6685decdbea877bf4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15959a3f07d11ef6685decdbea877bf4_JaffaCakes118
-
Size
407KB
-
MD5
15959a3f07d11ef6685decdbea877bf4
-
SHA1
7e823006b3eed5cdb2a074da105b8972faa3b5d9
-
SHA256
c90e8e57784234521bb24ab7fdf36bf4ea7f445f83e6e15093762b4caef0544e
-
SHA512
c30c439e8d0f4de87b6cc2696e869aa241dc42626d13e9f8ca7069701d198084ece7cff539c28401cdff53c62336a71fd81e0918cabe9e17780a4517ca1f9a22
-
SSDEEP
6144:5498QBcLPygEcpVkE+xX+/hgoRZwQo+NS8hAqUKNHddT0NyKMkX/rDhMAUOFz/qE:5ZPyIpmbxX+DI+wchdAyKMG/rDiOFG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15959a3f07d11ef6685decdbea877bf4_JaffaCakes118
Files
-
15959a3f07d11ef6685decdbea877bf4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 406KB - Virtual size: 413KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE