Static task
static1
Behavioral task
behavioral1
Sample
017b5408ce1cab60bff499d6fbbc2f71_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
017b5408ce1cab60bff499d6fbbc2f71_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
017b5408ce1cab60bff499d6fbbc2f71_JaffaCakes118
-
Size
6.3MB
-
MD5
017b5408ce1cab60bff499d6fbbc2f71
-
SHA1
534a087677b081f310c09bf7f14df9b2596eb45d
-
SHA256
9915349a2597265b5317dad586a6282ba6f6c1cd0a366ef44cf01039d957c294
-
SHA512
4c50be5f206b0a5db24e77e26cae8a9a23fc74b69a61ca8e23a7e530cbbfd3be10c6f3b5ba8849ad4ce513210e45c3673a665383bd55d59dea0463c35d1e2539
-
SSDEEP
49152:X/dvDllf+J/OyCPOQOyCPOFHq8Zbn/VHgOGfXK+JL8N+Jbor6hHJ2ELQu9zPqeR1:VvDlltPO/POfHgOSK+JLJJ2aRb8U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 017b5408ce1cab60bff499d6fbbc2f71_JaffaCakes118
Files
-
017b5408ce1cab60bff499d6fbbc2f71_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE