Static task
static1
Behavioral task
behavioral1
Sample
177b63d9bfc1ced302c4b30caeee3a6c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
177b63d9bfc1ced302c4b30caeee3a6c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
177b63d9bfc1ced302c4b30caeee3a6c_JaffaCakes118
-
Size
21KB
-
MD5
177b63d9bfc1ced302c4b30caeee3a6c
-
SHA1
2d7c796da4a2b34a30f350ef80951379ca5f6366
-
SHA256
0998fcb7677bdba8a189152c543f7f7395464d00a8b1d642e8b59dbb9b50d6dd
-
SHA512
3f9e7a1072934a19730ee37fbf97304ada0bc6caf34407ca67df306b9681daae58ac40eeb098ad8854d4ac91dbcb055cfe2f1ce4ec46f9aa5c019a15d9fcd115
-
SSDEEP
384:VHucPNDD8q0UyESpmQfGr8O8TEpaupVf0Tb6zQOSbrBBE:1ucPyq0Uyx8J8Hgp1f0yMH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 177b63d9bfc1ced302c4b30caeee3a6c_JaffaCakes118
Files
-
177b63d9bfc1ced302c4b30caeee3a6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE