Static task
static1
Behavioral task
behavioral1
Sample
10b3ab9f5280dc7428033450cad6689d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
10b3ab9f5280dc7428033450cad6689d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
10b3ab9f5280dc7428033450cad6689d_JaffaCakes118
-
Size
112KB
-
MD5
10b3ab9f5280dc7428033450cad6689d
-
SHA1
333503db0fda30e61ede6f8acaa056038886074a
-
SHA256
0627fbb45b722a9f386ea1a9b54697dd25be5692a72770f388a10f25134e36ce
-
SHA512
dc556d8420874eaec834837411594c7fbb4d4c4834ff6daaabcee6b3d920181386ff1fcae99c86eebc1c6d89274b242e4819a1087e18b11fb5fbf3da7b07cd58
-
SSDEEP
1536:I2ELyDzabRfnvHTMAhC+tDJL3URyQmPOLHhvZe:I5uDQfrMAp51UcMLH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10b3ab9f5280dc7428033450cad6689d_JaffaCakes118
Files
-
10b3ab9f5280dc7428033450cad6689d_JaffaCakes118.exe windows:4 windows x86 arch:x86
69744ec7f833f92ed7315fb874483893
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord913
ord939
ord476
ord942
ord948
ord475
ord930
ord929
ord109
ord775
ord928
ord130
ord926
ord50
ord676
ord80
ord840
ord831
ord205
ord209
ord584
ord933
ord224
ord583
ord597
ord243
ord404
ord457
ord908
ord348
ord247
ord374
ord784
ord525
ord875
ord515
ord395
ord254
ord435
ord432
ord613
ord709
ord521
ord565
ord878
ord517
ord519
ord337
ord351
ord431
ord316
ord336
ord334
ord895
ord240
ord239
ord372
ord856
ord564
ord839
ord408
ord183
ord578
ord429
ord266
user32
ord435
ord159
ord346
ord452
ord350
ord457
ord572
ord199
ord512
ord438
ord197
ord152
ord268
ord677
ord377
ord635
ord477
ord276
ord444
ord274
ord256
ord644
ord97
ord269
ord555
ord596
ord195
gdi32
ord406
ord437
ord144
comdlg32
ord112
ord110
comctl32
ord22
ord17
mpegsys
ord51
mplex
ord1
ord3
ord2
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.. Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE