Static task
static1
Behavioral task
behavioral1
Sample
173fbe352cce3a2edc6f61a739c2be7f_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
173fbe352cce3a2edc6f61a739c2be7f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
173fbe352cce3a2edc6f61a739c2be7f_JaffaCakes118
-
Size
284KB
-
MD5
173fbe352cce3a2edc6f61a739c2be7f
-
SHA1
5efdc9b4feb6665136f413ca1e5c2ab2c3e886eb
-
SHA256
3bbbde40618e8d5d0705e94f5b8259ec02a8aeda704efe9d7b64843c5fd58423
-
SHA512
23dd9d141aead9ad7eba4d14309c9a3954b65d9d8dbcc7960dcdec0ad56dbb3e06dbc27bb15b5532afb6df3ca85851fe0c2aabb0435385062008410bb0ff757d
-
SSDEEP
6144:EzakysoLPqplnzqz9zdzDzczihq1F+Bl5sMhoudUi1y:yak2ypkouWic
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 173fbe352cce3a2edc6f61a739c2be7f_JaffaCakes118
Files
-
173fbe352cce3a2edc6f61a739c2be7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE