Static task
static1
Behavioral task
behavioral1
Sample
170181df6fdc0f8991ff2c5bedc73f84_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
170181df6fdc0f8991ff2c5bedc73f84_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
170181df6fdc0f8991ff2c5bedc73f84_JaffaCakes118
-
Size
108KB
-
MD5
170181df6fdc0f8991ff2c5bedc73f84
-
SHA1
dd47cc55a1829199161f7fe142d1e17cd301691c
-
SHA256
ee2925a3b0c779a7728ac96d01f5db6836271dc1f4d3fd1d53c1bdcc6e65f8d9
-
SHA512
23043e6595e189708888768f75b8ec0247e0eaf045f91300addb7c635c8da51d0717fd9204fee9f8f95dacb682d1de4635adef09955345d8c533bb26197bd3ac
-
SSDEEP
3072:zrtqgbBQSEZOFLncV9pX1mNgX8yfUVSYuSfQVbx9f:tRBnYX7XbfkQVbx9f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 170181df6fdc0f8991ff2c5bedc73f84_JaffaCakes118
Files
-
170181df6fdc0f8991ff2c5bedc73f84_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rteytr Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdgfsd Size: 512B - Virtual size: 382B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.njhg Size: 512B - Virtual size: 99B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reteef Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ