Static task
static1
Behavioral task
behavioral1
Sample
179c1e8ec493f8fcf6060cc4d52c99d7_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
179c1e8ec493f8fcf6060cc4d52c99d7_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
179c1e8ec493f8fcf6060cc4d52c99d7_JaffaCakes118
-
Size
206KB
-
MD5
179c1e8ec493f8fcf6060cc4d52c99d7
-
SHA1
5ce48eef96095cc46a3b3bfdf0752cf9c048e308
-
SHA256
9e5f7ae167df8170385b0ff608935c50e19544920b0a2014b5e0bade81d11ad4
-
SHA512
2026a86428ac8968ee88518593a0b6b22d517a4f88327949ec5a0712e7c07c43eb6b7a89b94a5df6e0af3870e18037481ff52f8149eddb8c738725bc6835cbdb
-
SSDEEP
768:RgpxQtY35UcN6tI+klKZhBIRERfIJAv98ahoJ:ixQtY3n6tD9X7Z8CWJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 179c1e8ec493f8fcf6060cc4d52c99d7_JaffaCakes118
Files
-
179c1e8ec493f8fcf6060cc4d52c99d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ