Static task
static1
Behavioral task
behavioral1
Sample
177230b63825bb6742a837e6d94bec07_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
177230b63825bb6742a837e6d94bec07_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
177230b63825bb6742a837e6d94bec07_JaffaCakes118
-
Size
301KB
-
MD5
177230b63825bb6742a837e6d94bec07
-
SHA1
f5a18c85ff4805ac714097d3fef5c64809661b46
-
SHA256
c8145d94aeb9be7f437deebb6b0df43240b93574e3c69e539d2a167c95cb3f8b
-
SHA512
62aeef0f8f68c6160b24a67feede0fc32526826c91ca37ade15f5c7ea460f132bee57ddc0b780b41979e3e276b1c1cd8ad2912ce6cc1bea689fd8e42ecd27400
-
SSDEEP
6144:JUFjpZ59j5fF2Pp7U3DzvfhgQCPch3SR4yvyKQGISVwFzDNb:JUjBjL2PRU3nnhrCPcJyvyIelb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 177230b63825bb6742a837e6d94bec07_JaffaCakes118
Files
-
177230b63825bb6742a837e6d94bec07_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wtq Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE