Static task
static1
Behavioral task
behavioral1
Sample
171a435a979eb342eaf8f9b6bd3e6a6f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
171a435a979eb342eaf8f9b6bd3e6a6f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
171a435a979eb342eaf8f9b6bd3e6a6f_JaffaCakes118
-
Size
71KB
-
MD5
171a435a979eb342eaf8f9b6bd3e6a6f
-
SHA1
1f70a9ec4f40227c24991f81f0aa809b745a3487
-
SHA256
30ca8688e34c2881beff5bcf054aaefd1cb9d12cc12855c8f525837b471a096c
-
SHA512
834d4fd7af9e9d5753846694e53633b56fcae8fdb4dd979796b9b1db5fc3af2111b91e8a652269c920d8cfe71f2e7efdeb399df25e97c9f6e7ca3262ea0a8054
-
SSDEEP
768:9rR4gWpJqddHs/FcNfwgN4Yle9JwVnHkB9/fq6WIu6wrD11111yxeKMr1prFVBTG:ZYcFbNMdfq6Wz6r0KMZhn9KHxaQH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 171a435a979eb342eaf8f9b6bd3e6a6f_JaffaCakes118
Files
-
171a435a979eb342eaf8f9b6bd3e6a6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�test Size: 33KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ