Static task
static1
Behavioral task
behavioral1
Sample
15e6fe35a3d0be2a34abd5452d66e5da_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
15e6fe35a3d0be2a34abd5452d66e5da_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
15e6fe35a3d0be2a34abd5452d66e5da_JaffaCakes118
-
Size
141KB
-
MD5
15e6fe35a3d0be2a34abd5452d66e5da
-
SHA1
0a0d203001067568ee740816bfa5a81540695d2c
-
SHA256
d14ba09ee3ad6459ca32ee4d6c98c147c5ce148d8bedfe15abe37aaf08416821
-
SHA512
b033349e57c8cdd5b7be7657daa6e279bf4871f42dc920b9d7cc8597fe620acfa7d2af6e060d53d22ac7026b209fdb3250a4c19c2a5fb659504bd804ea018c1d
-
SSDEEP
768:7IRS2U5v/PcrjNBozI1bPBrYsp6dKWzy1:7eU1/ErjPozGPPb1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15e6fe35a3d0be2a34abd5452d66e5da_JaffaCakes118
Files
-
15e6fe35a3d0be2a34abd5452d66e5da_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.e_tab Size: 512B - Virtual size: 125B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.redit Size: 1KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i_tab Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.site Size: 1024B - Virtual size: 618B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wdata Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ