Static task
static1
Behavioral task
behavioral1
Sample
10f738a02080ab3a613aeaa10fe728e6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
10f738a02080ab3a613aeaa10fe728e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
10f738a02080ab3a613aeaa10fe728e6_JaffaCakes118
-
Size
1.1MB
-
MD5
10f738a02080ab3a613aeaa10fe728e6
-
SHA1
b4b5c79fa7285eed4df839e91fc8f4318d3531d9
-
SHA256
a6a05440a7ada44e7cb3edbc1e3eab4164740c62b032ce43ef6f16e2795e657d
-
SHA512
7123cb47e8c7be579c562bea066411cc5a24d1fc33d46116f2784b67c9678a8857b20ef5850a9be00e402ae137d40b4983258e10c470d7d1534da5c5a9fc464c
-
SSDEEP
24576:5DGZUkLDdccteLfmXWIZ5gZk0Sf2ItXgYBCICwinW3b:pqFezmPgG/f2ItwYBCIrzb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10f738a02080ab3a613aeaa10fe728e6_JaffaCakes118
Files
-
10f738a02080ab3a613aeaa10fe728e6_JaffaCakes118.exe windows:1150 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.gypcen Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cyjsx Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�% Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 392KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ynhxao Size: 52KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wnprtf Size: 84KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzgqrj Size: 580KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
.krpbeo Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ