Static task
static1
Behavioral task
behavioral1
Sample
17c68d9c0bce653909ef3900bf23063a_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
17c68d9c0bce653909ef3900bf23063a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17c68d9c0bce653909ef3900bf23063a_JaffaCakes118
-
Size
20KB
-
MD5
17c68d9c0bce653909ef3900bf23063a
-
SHA1
795c3665dfdc8c571575c19b405ae1551d7ffebe
-
SHA256
6ee53897fbcbcc9b84c56437799ad5f479c96536ceac588de03a2cbdefde275e
-
SHA512
ee8b459a26ac8fa30e838235d9ebb1d003610e6aebae9efa08549be532ff95b2eac045cad3821ac0aad0ec6ea543d88e857594e583cf1373e5c8ef382138f343
-
SSDEEP
384:GmuhOOnDH5EkUNhx8aFOld5sQaSk4JEBZ7OESnaNJawcudoD7UDw:Gi8ZXk0Ai5OV4O77OnanbcuyD7UD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17c68d9c0bce653909ef3900bf23063a_JaffaCakes118
Files
-
17c68d9c0bce653909ef3900bf23063a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE