Static task
static1
Behavioral task
behavioral1
Sample
010c15162fb10cf8881099ebf0bf5263_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
010c15162fb10cf8881099ebf0bf5263_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
010c15162fb10cf8881099ebf0bf5263_JaffaCakes118
-
Size
44KB
-
MD5
010c15162fb10cf8881099ebf0bf5263
-
SHA1
d618c164d6010826daf1e69287b6059053400ce6
-
SHA256
dfc0ab5b26f54edafd2150b4aab7f787d796d655878a8a66b1906692b878e060
-
SHA512
ac3daa28674b5aabbf9df75cf566fae672f983d0e9d7bf5ec36641fa9d557d0b15b5284843273a9264c9c0d20742e1087731a74aca277b02aae02b3985e63aea
-
SSDEEP
768:gMf6yMIQ4n6vsiGbno/Lu8fPzoA85KR2C/Ht6bAFjznAeXDS7s:11h2vADozuyPzjLcsHkkRn3DS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 010c15162fb10cf8881099ebf0bf5263_JaffaCakes118
Files
-
010c15162fb10cf8881099ebf0bf5263_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ