Static task
static1
Behavioral task
behavioral1
Sample
10a4d24de2f30a8be8e2ffd720e81811_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
10a4d24de2f30a8be8e2ffd720e81811_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
10a4d24de2f30a8be8e2ffd720e81811_JaffaCakes118
-
Size
105KB
-
MD5
10a4d24de2f30a8be8e2ffd720e81811
-
SHA1
18679db4b14706a47d8ed1bab8d959cf46a941cf
-
SHA256
b20bde470eba8ad44dc8d5a356d494c8ab2b0b85bcd41bf7bcdf13fc9fb5d5eb
-
SHA512
9e38225224c95cd9b7f0048d972207e685dd824e23907bed0ff4565e5b3369e3529331ae64d35eaf96059f85d8ac52737328d21eefa1e6fe37d23e74be46c0dd
-
SSDEEP
768:k313mtkeohlas4R8chbk7LgdUjEbMyiKQQQfBFpmFHn1DdzyzznDbkRSd3ALn4IV:2ZmJoDcaLgeylQQQfBFIDk3QLv5KDL0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10a4d24de2f30a8be8e2ffd720e81811_JaffaCakes118
Files
-
10a4d24de2f30a8be8e2ffd720e81811_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�gQ� <�� Size: - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�k2e���T Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE