Static task
static1
Behavioral task
behavioral1
Sample
1c2710140dcc069aefcb183916ac4318_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c2710140dcc069aefcb183916ac4318_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1c2710140dcc069aefcb183916ac4318_JaffaCakes118
-
Size
1.2MB
-
MD5
1c2710140dcc069aefcb183916ac4318
-
SHA1
40941d01deeb4f0c5a69cab4364a8c75fb5f1df0
-
SHA256
09d3f107b0810a20bc5c12988bbbcaf1de2677ac4fea5eb9f27a3144047c8be8
-
SHA512
ced93bab0a5267d5d2680bf605c0fabe64c0d7fa42f2ca9b527150f9ac664f8e80bd9cbf9ea2168b1c55a4896e593bf4f84e1cd7454920a38e08596b50b4b442
-
SSDEEP
24576:D0SsJ+9mmRHw0DIGWXRnR7m+CLYo+fN8+H9qvwcrWZ8/:YS6+9dHwOI3R7ccoa6vwcqG/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c2710140dcc069aefcb183916ac4318_JaffaCakes118
Files
-
1c2710140dcc069aefcb183916ac4318_JaffaCakes118.exe windows:4 windows x86 arch:x86
7cee7593e5674aee88b696bbddd401db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
Sections
ngrjwxcg Size: 552KB - Virtual size: 10.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xjtkzfiu Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cgxhdtkw Size: 616KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ajmrduui Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE