Static task
static1
Behavioral task
behavioral1
Sample
10206f383adef986507e88e72344af55_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
10206f383adef986507e88e72344af55_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
10206f383adef986507e88e72344af55_JaffaCakes118
-
Size
685KB
-
MD5
10206f383adef986507e88e72344af55
-
SHA1
23f028ff87fd98a8d57852e1ef566facee90f8b1
-
SHA256
e84d2bc74bcaa967cd3ce8140859734fb3a433c520315fdfc589f8af50e44708
-
SHA512
054c6454585ed9fc8e65cb0a39209eacd5e796564a5753b7964d0821de82fca35e4f3b10980855bdc624f8efc2fcc1a5e19c4c3c7e7fc8f74c3cc92be525e252
-
SSDEEP
12288:+1kZrABxvJmYVpP+pOR0SfyTTF1ezHuF3Z4mxx/X2Fi0yT8Y:gkZsJmZp6fy37ezHuQmX+ZywY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10206f383adef986507e88e72344af55_JaffaCakes118
Files
-
10206f383adef986507e88e72344af55_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 369KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE