Static task
static1
Behavioral task
behavioral1
Sample
2f17b1b73e7ddd90938b490deeebd3d3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f17b1b73e7ddd90938b490deeebd3d3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f17b1b73e7ddd90938b490deeebd3d3_JaffaCakes118
-
Size
27KB
-
MD5
2f17b1b73e7ddd90938b490deeebd3d3
-
SHA1
0d19628e422664ced7d0739ef21bd35dfaf51c64
-
SHA256
dd5d456a07f090d603ea31c913575531bbebea6d60ffaac302f2fcd439a37d1b
-
SHA512
a717717c675d8d1b66ccfb2d8519189298de870d39ce03066bcd004a0d1e64c42801ea531e856050dbf083253dc620bd283fc9654a6225413fdc26f460f3d74c
-
SSDEEP
768:wNoy9oTE7zmBZqGMVKdsGJHAmV9VOvVu:CR+qH4TJgmV3O9u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f17b1b73e7ddd90938b490deeebd3d3_JaffaCakes118
Files
-
2f17b1b73e7ddd90938b490deeebd3d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e58d0c080fff3efd1b29d3331696cd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
Sections
�F4�?�� Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
dL�p % Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
����C] Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ