Static task
static1
Behavioral task
behavioral1
Sample
179c2daaa65636b66875f133933b4e29_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
179c2daaa65636b66875f133933b4e29_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
179c2daaa65636b66875f133933b4e29_JaffaCakes118
-
Size
88KB
-
MD5
179c2daaa65636b66875f133933b4e29
-
SHA1
bb5434d9d060c12a4a185754fdf5551ec5eaeadc
-
SHA256
61c663d6b16ad89af0af1db433395327ae50dc9d514d28f3ef0de3c548861dbe
-
SHA512
45dcdeb1cd7f68d1adf097eea311ed662b6162fe6913bd52571aa54cbcd486a0d80cb42cea45eaaee464467e0dc20adddd09a493e9dd81e5aa2acbf602163f25
-
SSDEEP
1536:inDlOJMDqjv3n8tnpBZTBii3vDji0y+++++++++++JL+++A++k++++++++4N5UPV:inQHP4si3vDji0VN5UPQ6Ad9u1kC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 179c2daaa65636b66875f133933b4e29_JaffaCakes118
Files
-
179c2daaa65636b66875f133933b4e29_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ