Static task
static1
Behavioral task
behavioral1
Sample
101b3d8d4b237c1d60b76e6fbb0f28a6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
101b3d8d4b237c1d60b76e6fbb0f28a6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
101b3d8d4b237c1d60b76e6fbb0f28a6_JaffaCakes118
-
Size
18KB
-
MD5
101b3d8d4b237c1d60b76e6fbb0f28a6
-
SHA1
80e18ada9cdb574553c11b9b2ab83138f5773ffa
-
SHA256
a243c86ba95e42899bf52be9cfb6b232949411325317a56b502408f6162d1580
-
SHA512
fd31931e6ea86d7705bd71f7efb323eb8a200de5b7bf395b8dda1ae2796669d1189b9bb156e212da6ad6fa3066c3bf33ad41afa1f2fc721bad2c7b198bf16ca3
-
SSDEEP
192:4UHLupLvktr30AS1wAVrpwbxP5PBoN/ewIim6svBRHc/doFLO6u3C1wgIMTr8QX6:AqrkAYdVdkSFeXV+oFLOLC1wgj80dyAy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101b3d8d4b237c1d60b76e6fbb0f28a6_JaffaCakes118
Files
-
101b3d8d4b237c1d60b76e6fbb0f28a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 720B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE