Static task
static1
Behavioral task
behavioral1
Sample
173f8a540cad986e07c87e550d969719_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
173f8a540cad986e07c87e550d969719_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
173f8a540cad986e07c87e550d969719_JaffaCakes118
-
Size
245KB
-
MD5
173f8a540cad986e07c87e550d969719
-
SHA1
869c136a88befb4568f4e069f441d55ac3711b2f
-
SHA256
1b3dfc6aba80cdb451bdeaa7e82d384161256570bf4b2ef5c2f2844997fcb1cc
-
SHA512
a0c328612dddd5757319d53c44f221641b19e7e90a0be12e8cbb72df31419ab4ca5f5469cbded4c546a8edc4ad45f344f087218dcdd58a64d63aeb2fdf9f675e
-
SSDEEP
6144:K2BqbkQ20hqZ+iqZ+9pcsrzzT7doe1YMWdmzdpBtvst:K2BqbF20W+5+9pvrHT7doe1VWydR6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 173f8a540cad986e07c87e550d969719_JaffaCakes118
Files
-
173f8a540cad986e07c87e550d969719_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.test Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE