Static task
static1
Behavioral task
behavioral1
Sample
17686e9e91255664b5167d3c640afcb6_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
17686e9e91255664b5167d3c640afcb6_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
17686e9e91255664b5167d3c640afcb6_JaffaCakes118
-
Size
103KB
-
MD5
17686e9e91255664b5167d3c640afcb6
-
SHA1
3c9dd783c6c59064d06cc217b2ad17d5315b9066
-
SHA256
42b4621cd70aea8c5ddea7043fe6d350fbff79b086c45ed4c32285a38122c6b7
-
SHA512
88b1f69d3571fb86a9e4da7bcd5de89bea96b7395605586dbcaa0e92f6b12cb8bc57be13bd781b1b7140fd7861e50c81fb0e7e50c6a0df5c60601278d23e6663
-
SSDEEP
1536:IUimB1TEJN5RzEP5rblVeA5/L7zt2QzUXmjRe7LH8w5aLVO084FPKpu3:IUhB1IzbzEP5rbP5/LQSsmw7olOHWb3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17686e9e91255664b5167d3c640afcb6_JaffaCakes118
Files
-
17686e9e91255664b5167d3c640afcb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ