Static task
static1
Behavioral task
behavioral1
Sample
10400c10611177b17843ae24990b2cb2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
10400c10611177b17843ae24990b2cb2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
10400c10611177b17843ae24990b2cb2_JaffaCakes118
-
Size
349KB
-
MD5
10400c10611177b17843ae24990b2cb2
-
SHA1
79ebbfd0d7e80effd217f67b0d94bb04f9925d0d
-
SHA256
13a4415b7ebd23f1b4d82d057a8b7304052d955a61eb06727b7cb940e25276ef
-
SHA512
531cd844a678d8ddfeae9e06a9fca0f196c18eab63a36745a5acbc50dfce09a3b1b1b896e5c007e01d4e1b8ab086b049401f4b3011dfcd5165612ad14a4dad4c
-
SSDEEP
6144:8KJdJKMtnU3cEm/bYVDSUxh7QEYSnlTBIWhhVuQhQyHf7JWMx711fu/b0Rd:8K1X+cEm/KDSUxh7bYi/hAwQ8QWdu/4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10400c10611177b17843ae24990b2cb2_JaffaCakes118
Files
-
10400c10611177b17843ae24990b2cb2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.9MB - Virtual size: 10.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE