Static task
static1
Behavioral task
behavioral1
Sample
10cd1531dcefc0bb4d2e401e2e5b31c1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
10cd1531dcefc0bb4d2e401e2e5b31c1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
10cd1531dcefc0bb4d2e401e2e5b31c1_JaffaCakes118
-
Size
4.3MB
-
MD5
10cd1531dcefc0bb4d2e401e2e5b31c1
-
SHA1
46779e0a4985b19f95dc49e3588de96ce28e8102
-
SHA256
ba9f546f04d691727184df860f8a2267647c35131a92994b4cdfb0784b38d563
-
SHA512
c857fe83692d904b5fd66acafcd790a364e33a2454d5c16841f4ca6f215ef261b5d33ee33e736e322f7960e2da142fbd7a31fe5d88b0bf483d7589261274d309
-
SSDEEP
24576:YMdie4u3yILQmXC4iipEEgGpqQeUtrTRrWfSkpcrbr8:Ym53yIsman0qtI4pcrbw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10cd1531dcefc0bb4d2e401e2e5b31c1_JaffaCakes118
Files
-
10cd1531dcefc0bb4d2e401e2e5b31c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 159KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 59KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 372KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE