Static task
static1
Behavioral task
behavioral1
Sample
17c1b21423d770854ff0f43a9f6492ca_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
17c1b21423d770854ff0f43a9f6492ca_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17c1b21423d770854ff0f43a9f6492ca_JaffaCakes118
-
Size
7KB
-
MD5
17c1b21423d770854ff0f43a9f6492ca
-
SHA1
6a0ad66812a49f6846f503c1af40a1eed98a5014
-
SHA256
da7ff431afb0da6adea69c2937326493a2ed22d7a3152fcc12d36575985d5786
-
SHA512
0d3e7387903f45d258b0026e5747ef3b64dccd6ebf049ad79f44f37139a9f0f1d21e4cc1794939590a0988c78ca309cdb184ecee7f5e9f9316d863bafb1ea1e1
-
SSDEEP
96:Bfrr5AkbjrLzVKHzB1jkRqHolS2lYDzHdV7DjNnt4:BfXxrLzADjkRqh2lqhNnq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17c1b21423d770854ff0f43a9f6492ca_JaffaCakes118
Files
-
17c1b21423d770854ff0f43a9f6492ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 511KB - Virtual size: 510KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 323KB - Virtual size: 322KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ