Static task
static1
Behavioral task
behavioral1
Sample
170a9ca79b8c083d23595046c8362e24_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
170a9ca79b8c083d23595046c8362e24_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
170a9ca79b8c083d23595046c8362e24_JaffaCakes118
-
Size
272KB
-
MD5
170a9ca79b8c083d23595046c8362e24
-
SHA1
03c2d81375fa2fe95a1db0c99ddcea6920bd292f
-
SHA256
dc8d189851cf6274ba05d445cce6233766a24e764dd7312ab0601ab1c74f1b23
-
SHA512
b5539c926cbc8a3aa7477d3d18935bda6e82234fc1407400878fae7254ea880c53f829ef46b847c4a7669b950dfa6809daec98914cfac3b5ae2dcd6dded40261
-
SSDEEP
6144:bUCYMbAm/2CJUPq1I0SxNWNF3cv8pzjJGBC4v2F:bx9/huQRM8pIjG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 170a9ca79b8c083d23595046c8362e24_JaffaCakes118
Files
-
170a9ca79b8c083d23595046c8362e24_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 148KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE