Static task
static1
Behavioral task
behavioral1
Sample
171720a09d525b0c7a2b56521897f4df_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
171720a09d525b0c7a2b56521897f4df_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
171720a09d525b0c7a2b56521897f4df_JaffaCakes118
-
Size
112KB
-
MD5
171720a09d525b0c7a2b56521897f4df
-
SHA1
52499e48373d5d5ee9e7264379828054ef8fc4f8
-
SHA256
0a1c58272cd18d6d595b404067b6b4df84822e02169da1a0aa37f0d98a2a8da4
-
SHA512
2ba717772aa19c3da4409aca5129a5b3c580fea8186a845f0bed088caa1c344595a8226c28e0878b96a90c100f15861ce2c89ba2a6ded59064021bee277802d3
-
SSDEEP
3072:hPAT2v5Jxwgfe24CS3p68pXWAQjgkjEBq1I0VRz0um0:K8JxwgfW348pmnTYBAIAzdJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 171720a09d525b0c7a2b56521897f4df_JaffaCakes118
Files
-
171720a09d525b0c7a2b56521897f4df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE