Static task
static1
Behavioral task
behavioral1
Sample
17c101a35f72fa4de7d5f00b0080d2f4_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
17c101a35f72fa4de7d5f00b0080d2f4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17c101a35f72fa4de7d5f00b0080d2f4_JaffaCakes118
-
Size
8KB
-
MD5
17c101a35f72fa4de7d5f00b0080d2f4
-
SHA1
8106839a6481cbbc034ba8dd8f6f1ec05df2b2dc
-
SHA256
8fdef0f32e1ea557995633dddfed7a170af38988abdba602d2fc35fe2fc102e1
-
SHA512
e459366fd8bd771500d135169a281faa1ae572b8a3f0050e116a443d5616473f4d0e3ea2f9eeb5717a1ec41ef1a39a42f018bfdc41c3696888aebb6889202c30
-
SSDEEP
192:2tqpuaI0fINLNy6CxMQl3fqqngnbFOsb8W+P26MSdrBkgBw:SqPIn5CxM2qqmFOsbR++6MQrD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17c101a35f72fa4de7d5f00b0080d2f4_JaffaCakes118
Files
-
17c101a35f72fa4de7d5f00b0080d2f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 39B - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE