Static task
static1
Behavioral task
behavioral1
Sample
17c75b38e2b050a495055dcb8599d7f1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17c75b38e2b050a495055dcb8599d7f1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17c75b38e2b050a495055dcb8599d7f1_JaffaCakes118
-
Size
24KB
-
MD5
17c75b38e2b050a495055dcb8599d7f1
-
SHA1
ed7b745e99d9c3dc7df02454a55209244f635b5e
-
SHA256
720485aff7a966ff5186c18f7efd8168557dcce40cb44c8b8d5fa87e041ae532
-
SHA512
8913a439f3c5280fa31c63c02a9beabcc0fb6d5d4babd657e2f7af5f73992cae12668224fe7a97814a15a393b14f1e5aec61fa23adeb976c9347df1ad51d5dd6
-
SSDEEP
384:NiEH3vwMoW/fMqpJNGdbxzEFo2eS3WdEnvv4t5bD82J4hv:9oC0qpCnElydEnX4buv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17c75b38e2b050a495055dcb8599d7f1_JaffaCakes118
Files
-
17c75b38e2b050a495055dcb8599d7f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE