Static task
static1
Behavioral task
behavioral1
Sample
c10f51e86663f2f3f33f964aea4fd658_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c10f51e86663f2f3f33f964aea4fd658_JaffaCakes118
-
Size
720KB
-
MD5
c10f51e86663f2f3f33f964aea4fd658
-
SHA1
0c2f9db30cfe4aa85aece56b4f1effa34484e393
-
SHA256
43bb8870a7116c4014dfd420729d62ada0f9c674abc3fc636cb7dc082726859d
-
SHA512
03889cc6d662d3872f6611fa1f9859b17aeadf661628c72f5417773c1df830459bbe0a3b018ca60b5ca7bafa13eed818bbe42e77a52f8a539e7d385ab58c457d
-
SSDEEP
12288:y05vGspeV6vmOvmlIrjCsDruWmdun+LnaJeAZjppPh2Q/35LQXXKUcjp03Xl5Je8:y05vGspebK3uWmCBvLj35SKURl5cb0hH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c10f51e86663f2f3f33f964aea4fd658_JaffaCakes118
Files
-
c10f51e86663f2f3f33f964aea4fd658_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
saaoaucr Size: 48KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hxfeyuoa Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nagayxmk Size: 656KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zylmjdcb Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE