Static task
static1
Behavioral task
behavioral1
Sample
17d188b7dcd506242408aec7bb5ececb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17d188b7dcd506242408aec7bb5ececb_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
17d188b7dcd506242408aec7bb5ececb_JaffaCakes118
-
Size
125KB
-
MD5
17d188b7dcd506242408aec7bb5ececb
-
SHA1
441778b6e93d66b2cc61a407d17ce7638b66045a
-
SHA256
d13da2ef2fa3f55a1a351c828e4936628c4d3ea2d668a8683f9be26527a969cd
-
SHA512
271e97a9d97eaa02461d4fe6b968b11cbe8b01803b2845186c0fb073df69b1a724d9e2e4f6b532dd651911b7378098e826fa72222d8b81169ce900c1b438b193
-
SSDEEP
3072:7OmNkYSsZD+v8RgjmaqZGpIS+0qc3gSq0VbiX3PnuRB28:8YvDdRgjmaQGPPqc3gSBTB28
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17d188b7dcd506242408aec7bb5ececb_JaffaCakes118
Files
-
17d188b7dcd506242408aec7bb5ececb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 272KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ