Static task
static1
Behavioral task
behavioral1
Sample
170b65ea5b42674c0b7f32cbcfffe1c5_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
170b65ea5b42674c0b7f32cbcfffe1c5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
170b65ea5b42674c0b7f32cbcfffe1c5_JaffaCakes118
-
Size
781KB
-
MD5
170b65ea5b42674c0b7f32cbcfffe1c5
-
SHA1
668027c8be71c0fc58ab83a8b78a979b968de546
-
SHA256
65496e5f52b9dcf7ead136b90265961dddaed465c9e50e4d8c20126127b354f8
-
SHA512
c99a2bed58eaeae23c0c927ae6cac5b508b0812ab23774f6d25253e5304145236b4d5bbf4149b2fd2c0239201f90e550f7aa28ca0db5f04cd8bfbbf9b91b193c
-
SSDEEP
12288:S+lGvZc9wdYfgv7onjFlp6e4YUEZapVNnVI9APIF3Z4mxxrpBQgztR3tS8V:14spKon96e40ahKQmXrpBQg/t5V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 170b65ea5b42674c0b7f32cbcfffe1c5_JaffaCakes118
Files
-
170b65ea5b42674c0b7f32cbcfffe1c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 431KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 334KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE