Static task
static1
Behavioral task
behavioral1
Sample
cf10952db28c82854b57d32a7952c966_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cf10952db28c82854b57d32a7952c966_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf10952db28c82854b57d32a7952c966_JaffaCakes118
-
Size
164KB
-
MD5
cf10952db28c82854b57d32a7952c966
-
SHA1
b97523d2ffe29c1b639a88bee3932b0081a4992c
-
SHA256
c903bc3e382a7f0bdae2aba4bdf2b0d0337a9c98ac6e9be1c8ff9137da80da33
-
SHA512
367c9885052c08b85cf2677e84944c2446925e78efc4c6ad6b43bf8269773983a5773340197cb1b9b8f6d0ecfb57b88b4d4328e210136b55e6c908687e56bbb9
-
SSDEEP
3072:TtJ25uRBAm0Ai3vD+JByLB64zOWtfUbZabzssER7MZFzn:v25kANbbsazBfKZaMsM74
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf10952db28c82854b57d32a7952c966_JaffaCakes118
Files
-
cf10952db28c82854b57d32a7952c966_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 104KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x01 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yP Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE