Static task
static1
Behavioral task
behavioral1
Sample
15bef385cb77c42c5199df1b5dee4cf3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
15bef385cb77c42c5199df1b5dee4cf3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15bef385cb77c42c5199df1b5dee4cf3_JaffaCakes118
-
Size
119KB
-
MD5
15bef385cb77c42c5199df1b5dee4cf3
-
SHA1
ecf829381df1fd4d78cb6faa2a302e164a5a9e30
-
SHA256
07d793ad3122610eb0c3610248145e039be84b1ded99579acfe8379eeaa59e28
-
SHA512
b04bb06191ef3d9fac22a1c69260531d978bc5860cecea91258f75c8b5ed1528e2a3b98c1186ce1e5df1d63a7e1b16e4ef7065cd0460f9bd50caad05b15170d2
-
SSDEEP
1536:vYhExlg7IDed3D3GrpdqHlCQ5v/9EfRjJBPsgvwE4KZ3QfxK9lWbc:pwIDc37G9UHlCm/9EfnigGKZ3Q0b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15bef385cb77c42c5199df1b5dee4cf3_JaffaCakes118
Files
-
15bef385cb77c42c5199df1b5dee4cf3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 43KB
IMAGE_SCN_MEM_READ