Static task
static1
Behavioral task
behavioral1
Sample
617bb8254c1e958969e7a55f4bfb1778_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
617bb8254c1e958969e7a55f4bfb1778_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
617bb8254c1e958969e7a55f4bfb1778_JaffaCakes118
-
Size
472KB
-
MD5
617bb8254c1e958969e7a55f4bfb1778
-
SHA1
afbadba2669da62e4ed1eeb8d1a8decfa72fd424
-
SHA256
aa3d516e40330d812d2b4ff327ad625ae06896063c50fb8b4c9d765b1d28c6bf
-
SHA512
118254f36ea66c45c4e6818effdda035f07f302d1927e1a641c4dc86e4a99af1619eac68606b1550499a4386077e7df11d3ce56faa9cb0876d9458a4c1c13f59
-
SSDEEP
192:t3hQe0GFXtx+hvB1pMYjJHs6ORuSU0MvLr6e4PddhoOnVTgmC02wOlry2/UWXmfK:4encYNBmWMz5devJk5AZkzHHqKDDmpG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 617bb8254c1e958969e7a55f4bfb1778_JaffaCakes118
Files
-
617bb8254c1e958969e7a55f4bfb1778_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 464KB - Virtual size: 462KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ