Static task
static1
Behavioral task
behavioral1
Sample
177fb5cb4a32940badaa91257bca4a82_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
177fb5cb4a32940badaa91257bca4a82_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
177fb5cb4a32940badaa91257bca4a82_JaffaCakes118
-
Size
295KB
-
MD5
177fb5cb4a32940badaa91257bca4a82
-
SHA1
9788097c730983c5901c69591084495665a02555
-
SHA256
7075c68b89d6d5146ba8bdf7a6a980c34fa8c54e09ccec08699bcf58440d1547
-
SHA512
4af8db36264ce81f77cff14e0a65616fb878325f4ccbf2fb00d87e0dba33e30454a999fb4f0d77d98af6cfacf44c69a97691b6d90f0f10cbae430cf1b0620422
-
SSDEEP
6144:Clquxfwke7+5enxITPfxvpgxjpu0xnOwqs9URVdi4NgFyCVdY9jB1C1ofTj745:aqT7vnydxgxjM0QwORTiiCVdM+Iz45
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 177fb5cb4a32940badaa91257bca4a82_JaffaCakes118
Files
-
177fb5cb4a32940badaa91257bca4a82_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 283KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp10 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ