Static task
static1
Behavioral task
behavioral1
Sample
177252f76df77d42a029de9b37d10034_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
177252f76df77d42a029de9b37d10034_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
177252f76df77d42a029de9b37d10034_JaffaCakes118
-
Size
397KB
-
MD5
177252f76df77d42a029de9b37d10034
-
SHA1
462aec8da8b7ef497a6e48c6ea49d21292bfe5b7
-
SHA256
4af2371bfd4a851465fba32a3d5dac39cca3a6a2884994cff7c9b788a208b55f
-
SHA512
2d648cc52117196c3d11e3a74a7cdbdac73427684d59f7f71027937b82f4f2d1a5cac72beb3e4bdafe2ef95c05430ab4526f9e2db7ee9e5b12d9824617c1fac8
-
SSDEEP
6144:FgGu0/0LNOIoxLBVvvGzgc7iwPXzPsGDyWSCsLXJwNntacsW+yHl:+GuuExoxLfvvGzgoi4jUkFSzet
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 177252f76df77d42a029de9b37d10034_JaffaCakes118
Files
-
177252f76df77d42a029de9b37d10034_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 32KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 792KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE