Static task
static1
Behavioral task
behavioral1
Sample
17d77d172cedc46c2ef4071e78f539d5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17d77d172cedc46c2ef4071e78f539d5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17d77d172cedc46c2ef4071e78f539d5_JaffaCakes118
-
Size
88KB
-
MD5
17d77d172cedc46c2ef4071e78f539d5
-
SHA1
3b93b994525e03916ee0c0ff5c3b8bc75bd5bb6a
-
SHA256
c62d953d3dde2b8ec820dcf5da6f324814ce864b5d685c7d97ef6e26d08f9086
-
SHA512
0938c6def74de9c1287438feeea9f9d4bc0f3ee5e7ffb90d6fb79319bc66c6b24730d3f655b81860c40c28114aa8754c3082c5d08eee0506cb174b2e87a9a6a1
-
SSDEEP
1536:8IMBLOC2LihUOOp/X1eIJLzTXpw+rQ/tPic584ZlYYludj9Tawm:wZ/cimOuX1XhrQ/tPLYYQd5awm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17d77d172cedc46c2ef4071e78f539d5_JaffaCakes118
Files
-
17d77d172cedc46c2ef4071e78f539d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data1 Size: 512B - Virtual size: 1002B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE