Static task
static1
Behavioral task
behavioral1
Sample
101c6baf73d18e31b0896137d1caf41b_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
101c6baf73d18e31b0896137d1caf41b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
101c6baf73d18e31b0896137d1caf41b_JaffaCakes118
-
Size
104KB
-
MD5
101c6baf73d18e31b0896137d1caf41b
-
SHA1
e0d2165dd00eaa57b2562202ece9318b6c72d556
-
SHA256
d09c59f9d5fbd8cda31aa139a8166d21bdeac237cc3ced0e5434fab6acce894a
-
SHA512
368a56ca23546afeeeaefd342443726c57374e92f5d459b1510df828be0410e9c694db39ff9ddcca6cddc35ef369bb7cb47a228d01f72bb7675fdabbc376cffb
-
SSDEEP
3072:JsLtVmDoXfRFg1VPkAFVv1t5jk7xnrRPZVPLr:bDmf01VPB7Lk7xVxtP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101c6baf73d18e31b0896137d1caf41b_JaffaCakes118
Files
-
101c6baf73d18e31b0896137d1caf41b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
r8vh Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q788g4 Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zoer Size: 347B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE