Static task
static1
Behavioral task
behavioral1
Sample
10695b2004c88a28e603bb1fbf5d40a8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
10695b2004c88a28e603bb1fbf5d40a8_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
10695b2004c88a28e603bb1fbf5d40a8_JaffaCakes118
-
Size
733KB
-
MD5
10695b2004c88a28e603bb1fbf5d40a8
-
SHA1
2c40d545afe07054bcc7d54db6ead80d8825c876
-
SHA256
8375ef52037b9c15299f838ba76c1b3f732626f3777687afa057f76f2486bafd
-
SHA512
c2230fbeb7e957f8c7e2b724e850e693154798d686f23cf56d392db2a80197aabcd8db5b56d388de04b89e9fbf0ede3f8fd2404bd96815d3fcb6a56b0ea41e69
-
SSDEEP
12288:NLazmEuN9RcTXhUXqfA0fUjhQVx/pqa4wT0qbzySZ4JrF3Z4mxxRi5Pq4EqCzk4Q:wzmncTXbfiqVRY9SZcQmXRi5PpC44jov
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10695b2004c88a28e603bb1fbf5d40a8_JaffaCakes118
Files
-
10695b2004c88a28e603bb1fbf5d40a8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 383KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE