Static task
static1
Behavioral task
behavioral1
Sample
15e4f972465a7f08c957199be0f0c137_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
15e4f972465a7f08c957199be0f0c137_JaffaCakes118
-
Size
498KB
-
MD5
15e4f972465a7f08c957199be0f0c137
-
SHA1
f21c858322bdb0b408b4772fc37a985f8aeac607
-
SHA256
40eda338c57251dc8be9bf709988bd30f6b87ab3adc118cbea5157a9ab0b7f42
-
SHA512
b83b0f2bcf987051bc9885fa5ef708227b313e65b4864c3a845d26373515f6865887e21afa79ff3e3162a6d20a39914f542fdca82e5944a861ebd90da7c30693
-
SSDEEP
12288:zJ2xrmmr60M9mqUJOhLlQihDSLrCCLOslGne4vsyv3ErS5F:12xUNZGfYRp0yvc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 15e4f972465a7f08c957199be0f0c137_JaffaCakes118
Files
-
15e4f972465a7f08c957199be0f0c137_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 496KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ