Static task
static1
Behavioral task
behavioral1
Sample
17239bbd604a5468c991e2570cc53962_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
17239bbd604a5468c991e2570cc53962_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
17239bbd604a5468c991e2570cc53962_JaffaCakes118
-
Size
98KB
-
MD5
17239bbd604a5468c991e2570cc53962
-
SHA1
3481b45bd6a3306ca22636341f9735c1a3893256
-
SHA256
bf97f7f94b9354e6da5d8781ed3654038798b113e3e6e5477040373d5c3312fc
-
SHA512
4cead0671fc9b53cd521349fe495f2bec9513f48a3752c386c5b7a416854d9bfbe02326493cd347be4fbabec3c8b89b0f22a285cecc896a8a6be9ac4df1ce3be
-
SSDEEP
3072:EcQBEOcWqdq0svu9qnkw+pVPezkp8y4ui:JEBopto+zPeo8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17239bbd604a5468c991e2570cc53962_JaffaCakes118
Files
-
17239bbd604a5468c991e2570cc53962_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bfso9t Size: 3KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bipohn4d Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE