Static task
static1
Behavioral task
behavioral1
Sample
a10c19c4bb780e469fc9138d43e38821_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a10c19c4bb780e469fc9138d43e38821_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a10c19c4bb780e469fc9138d43e38821_JaffaCakes118
-
Size
1.2MB
-
MD5
a10c19c4bb780e469fc9138d43e38821
-
SHA1
71b1d4b7d003c601e90104166f93c92771aba870
-
SHA256
c9ba3735e36d533c7a6ee8cc32bf081d9bbd36660fa5c8bdf89adcf9a7b36eab
-
SHA512
6931a91db1e0efdae9c8b1f7e9de9b375f87b7e1a8931999c5e069bb42985d8ba5c0e88c55bba29b86cf833b78c40704f2b947d6ae846f38cb0e113b6b428328
-
SSDEEP
24576:C9jzxyrYrWZxnoBCp1yPPhPAgZZf5skPOAgDdj1kLTFi1nLaKRurIjZ3pZ9EKgd:ClzIH5buhPAgZZW8OAgp1k5ip3R3F3iR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a10c19c4bb780e469fc9138d43e38821_JaffaCakes118
Files
-
a10c19c4bb780e469fc9138d43e38821_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ