Static task
static1
Behavioral task
behavioral1
Sample
10191a3dfe6fb418c6ffcd8fd92503ac_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
10191a3dfe6fb418c6ffcd8fd92503ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
10191a3dfe6fb418c6ffcd8fd92503ac_JaffaCakes118
-
Size
381KB
-
MD5
10191a3dfe6fb418c6ffcd8fd92503ac
-
SHA1
bb562dfb2b27549cc8cb52eb43e572ad8fd91768
-
SHA256
6f939913c4eb3d56131f6993d725b8008f5d717f3671cc6ca0c3eedba36007be
-
SHA512
c6054ac9aea646ef4f2d8633e12f330d24790af9d929762dc6c1d9cddcb403dd709178018129357c2286cfdac3216a7308164e20bc4d86bbbb760e1ae4801f02
-
SSDEEP
6144:h/na4kk4L8+Ee0CYDTAsdRKoO2JssyceyS38b2CtIzJyEgP5QIdcBIZ91wNYXMea:5na9k4L8+iDNdRYBtcvS38LCJQBtdGsY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10191a3dfe6fb418c6ffcd8fd92503ac_JaffaCakes118
Files
-
10191a3dfe6fb418c6ffcd8fd92503ac_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ