Static task
static1
Behavioral task
behavioral1
Sample
03170708567938fc277427ad1a1a0377_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
03170708567938fc277427ad1a1a0377_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
03170708567938fc277427ad1a1a0377_JaffaCakes118
-
Size
114KB
-
MD5
03170708567938fc277427ad1a1a0377
-
SHA1
be1b7cd51afc1cf3a9f36b400cb67e83323bdde2
-
SHA256
4f6c310dedeb027f4a7cae18ec50e4c873aa0393407c9884e5b5c9e02fc4caf9
-
SHA512
db19c139f3511ccda84bbb2fec0ba4d50d4d4a94ae3930333229cbe1ce18696002445d31b6dfe64b17e67f2adb4c2dcb64290e54910e309044275a5ed578fa11
-
SSDEEP
3072:ytVsS1JBsy5ILGvgVEr8L51JdENuOEcra31sstJltet3dsJi:FS1JBsQIyvgVCuzMfaFsCe4Ji
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03170708567938fc277427ad1a1a0377_JaffaCakes118
Files
-
03170708567938fc277427ad1a1a0377_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
5�80 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5�81 Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5�82 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3g5uRNX0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ