Static task
static1
Behavioral task
behavioral1
Sample
d10c99dae55a5987b881f9211b89d2f6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d10c99dae55a5987b881f9211b89d2f6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d10c99dae55a5987b881f9211b89d2f6_JaffaCakes118
-
Size
125KB
-
MD5
d10c99dae55a5987b881f9211b89d2f6
-
SHA1
08a237baffdde76b6c6249ee772b3a24a264a70d
-
SHA256
cbc86c2e53c1b63182222f84fa2b78aa5bbb2dd6e8982e76828dcb96cba9e47b
-
SHA512
b7fcb8399b7188a35336a99c51920bac33003154808865eec38ef8172648a3a59c93c08dbe73b47a1364ce3bc86a276e314b082992c91882470647a87bde9ed8
-
SSDEEP
3072:Oy8xfp9eLBjQnJ92cBlUdVPU/5ozbmdbibVeiA7eNcyi:OlxJycBOfuJ2bVzYe+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d10c99dae55a5987b881f9211b89d2f6_JaffaCakes118
Files
-
d10c99dae55a5987b881f9211b89d2f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 105KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE