Static task
static1
Behavioral task
behavioral1
Sample
17baf21746331b268556c6fdf06b5abd_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
17baf21746331b268556c6fdf06b5abd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17baf21746331b268556c6fdf06b5abd_JaffaCakes118
-
Size
45KB
-
MD5
17baf21746331b268556c6fdf06b5abd
-
SHA1
98dcac1973ac5a6f5baa8214b3df40248ffd32c3
-
SHA256
411aa8ad2b2534d6347505f7f88f33d5aa7707ca6a4e0a1c309585c16885144e
-
SHA512
284d7bf378c440ff46bc59f6b4e8620804ba07e5afb8dbec8cec60630c8829715625cde8829ee64ad3fd30d263ab16eab262b7522ca5719b73f289c10e7402a1
-
SSDEEP
768:XVtrAwBHQeH9GmABpDbf1u42T/dwJT/7H83nUwEomC4gHBxB2K6:XVew9Z23D71oTYvHroN4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17baf21746331b268556c6fdf06b5abd_JaffaCakes118
Files
-
17baf21746331b268556c6fdf06b5abd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.conf Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE