Static task
static1
Behavioral task
behavioral1
Sample
021617b88d914f6b48358c9e35ff62e9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
021617b88d914f6b48358c9e35ff62e9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
021617b88d914f6b48358c9e35ff62e9_JaffaCakes118
-
Size
2.0MB
-
MD5
021617b88d914f6b48358c9e35ff62e9
-
SHA1
bd5bd3dcb7e2ea5f6fa71034e0f6fa6c5a284db0
-
SHA256
b0975cf16cfd42cd58b128d2180c690e90b46e33f78d426177b743395891c54c
-
SHA512
4827bc7a892245b3e586adc1230de583adbbeb2654ae83e6b59eb03b0248d02a250179fc4ad1f7b7b9c497b41e3963f980de5e7dd2c31ea181307597c4762fac
-
SSDEEP
49152:pIssIZdlXNpB4AmajkbBDoHyXZV8xXDYy2pcz+OfGQuWBPp1H68FAX:5zX7CskbBDJpVkXUpmf6WBbzFAX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 021617b88d914f6b48358c9e35ff62e9_JaffaCakes118
Files
-
021617b88d914f6b48358c9e35ff62e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�v�Y0 Size: - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�v�Y1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE