Static task
static1
Behavioral task
behavioral1
Sample
017a39262bdc01251ef691e45755784f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
017a39262bdc01251ef691e45755784f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
017a39262bdc01251ef691e45755784f_JaffaCakes118
-
Size
49KB
-
MD5
017a39262bdc01251ef691e45755784f
-
SHA1
72ed9c57e9e2367e44fc0c16082284eb26b4aedb
-
SHA256
eaef9fa9b5b43b6b156d933580d3444885aec73d8531c974ead432c16c34f11d
-
SHA512
7e1e209c5e02f77a16402f841f7f391d2ac47312fe837e2acf1cb7375504790c981858d1d840f6dd38cf19d7266c6f558845fef67c72b6cdd7a0bfcbb9290e67
-
SSDEEP
1536:U4dONW6zo0WLrmlo97ZTstfUBj6PmwyTD8nAhfXuFIJf4Cn:wu/8qZgtfqAnAhfXfJf4Cn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 017a39262bdc01251ef691e45755784f_JaffaCakes118
Files
-
017a39262bdc01251ef691e45755784f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rwzjcwr Size: 37KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lgmntlt Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE