Static task
static1
Behavioral task
behavioral1
Sample
17b739e3023ebe3b9a31e1d8e437ce2e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17b739e3023ebe3b9a31e1d8e437ce2e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17b739e3023ebe3b9a31e1d8e437ce2e_JaffaCakes118
-
Size
43KB
-
MD5
17b739e3023ebe3b9a31e1d8e437ce2e
-
SHA1
0544351944103cd293586513939ae87447318011
-
SHA256
862c3744f321557142a17753624cf29762861e9ec65cc9ceec79a1edde93dd1e
-
SHA512
09035361acc60636b2a58bbc0967c9565217787c3a8917e09960849ad25f19107e36efdab5727513f96e8459d91f36e5fa2476fabd3b49ac7c2657b2d07f6fe1
-
SSDEEP
768:edK9PrqC1lSQ1l3rc4GpOIes5efLvDDe/3Za80rgqNdAAoRhmwRh/E12:eMtGVQn3YuIZ8fTDD6YVrgkdAAoR7b/3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17b739e3023ebe3b9a31e1d8e437ce2e_JaffaCakes118
Files
-
17b739e3023ebe3b9a31e1d8e437ce2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
xicheng! Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE