Static task
static1
Behavioral task
behavioral1
Sample
317d6b247db6109320fef376acbdd81f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
317d6b247db6109320fef376acbdd81f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
317d6b247db6109320fef376acbdd81f_JaffaCakes118
-
Size
380KB
-
MD5
317d6b247db6109320fef376acbdd81f
-
SHA1
c862d4acec29ac4eadde85ee52c5376fa3c5669b
-
SHA256
6251c11d2674cbcb3da2a3f83be842a7d79befe3cd8da50ee23b41e55942eae9
-
SHA512
e7bbd3a1a017606f19c8d4d073515d10d56a3c29eb6189ab8df56d9855a5d5760fa8433fd2da615ed851762cbaa202ad79792ac1aef9224311d8065b20142585
-
SSDEEP
3072:EgaA73hbvTVJpjEL5HZX5PJZTYeS+FJFrw0I5DS5DivW3qsPzrc77OWw8x8c:jPjrC5HFaeS+FteDgDx6ac769/c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 317d6b247db6109320fef376acbdd81f_JaffaCakes118
Files
-
317d6b247db6109320fef376acbdd81f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE