Static task
static1
Behavioral task
behavioral1
Sample
15f1acf9527129c4c2e6249b323ebaf4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
15f1acf9527129c4c2e6249b323ebaf4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15f1acf9527129c4c2e6249b323ebaf4_JaffaCakes118
-
Size
297KB
-
MD5
15f1acf9527129c4c2e6249b323ebaf4
-
SHA1
61d1afb0c308b73e414d58756bb9030579bc3c26
-
SHA256
f41505d72c7998204b23b7f0626b22bfcb94da098e19cd752ae62b7f5cae1c43
-
SHA512
cca2b2e17a1de58cad31dd78aef4eff79bba90fb53769e738969ecff8de430dd1841a94aa16c3db79fc1b15938d19a0abdf3ab727232e689fcf34c30a4bcba88
-
SSDEEP
6144:XMZS2jyCFDl+bh5QjjXi16x5r57Z5d22lIDjH2l2vlVuNXprtz+qRyXlPRRY2do9:XMsSl6h4Xior57oDjHG8cX5tzFRyXHRw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15f1acf9527129c4c2e6249b323ebaf4_JaffaCakes118
Files
-
15f1acf9527129c4c2e6249b323ebaf4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.cnsp0 Size: - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cnsp1 Size: 291KB - Virtual size: 295KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cnsp2 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE