Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_10cc455d2fff6b084f7ca2964c06d2c8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_10cc455d2fff6b084f7ca2964c06d2c8.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_10cc455d2fff6b084f7ca2964c06d2c8
-
Size
476KB
-
MD5
10cc455d2fff6b084f7ca2964c06d2c8
-
SHA1
aa825050e4af1b32bf308d408288d6ca8c887fcb
-
SHA256
32be8df01b7c8ec56c3a7582405a49c1b60c32cf0cbab383ffcc24c8dc57c8da
-
SHA512
885db65f0b5e0b54933b1410c320a952d04a23530b14f00d9ce44f328d96398c388584fc65e3514a6c410d0986abf929685efb505a7cdf0bf97de7c55580cdfe
-
SSDEEP
3072:l7s0y7KZBDHKiO+Lm3VpC191uyB3dcuGlW2g4XAZXlYro5FHnkXip:e0y7mpLm3VpjyB3+u2W2HwZXwgtnkX+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_10cc455d2fff6b084f7ca2964c06d2c8
Files
-
JaffaCakes118_10cc455d2fff6b084f7ca2964c06d2c8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 448KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE