Static task
static1
Behavioral task
behavioral1
Sample
17f26508aac068c6504734077a1f3a56_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
17f26508aac068c6504734077a1f3a56_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17f26508aac068c6504734077a1f3a56_JaffaCakes118
-
Size
305KB
-
MD5
17f26508aac068c6504734077a1f3a56
-
SHA1
94243ddd81dee25b7987de6f6892320e76d4a95c
-
SHA256
bb2334341df8a27362a8e7fd2673c7783853976f74e336f8a1fb06a7c315e074
-
SHA512
a51fc196cae674f3fb32745e07d8568156d720491a9798a674c242e907eb574bb2046c0bc8c2a88214ad2e535fe34dff8e0baace4ed9d75d66888c37ac0b521d
-
SSDEEP
6144:jX6iNq7JL8haP9Fot9jBtENyqwjuJc+yIGgbGlseKL5vKdjcEQ3etRHZBnj:LN88eGqwj0ciGnueKLYdcJOtpn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17f26508aac068c6504734077a1f3a56_JaffaCakes118
Files
-
17f26508aac068c6504734077a1f3a56_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
Size: 217KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE