Static task
static1
Behavioral task
behavioral1
Sample
17a8e0a85972cc55305ec2ee1fa7684c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
17a8e0a85972cc55305ec2ee1fa7684c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
17a8e0a85972cc55305ec2ee1fa7684c_JaffaCakes118
-
Size
444KB
-
MD5
17a8e0a85972cc55305ec2ee1fa7684c
-
SHA1
b0eb69d1afddf578aa4106863ca0a53def202bd7
-
SHA256
70843160f7342c824d804f108c303eb5deebd54dbef174828e65cfa7098542cd
-
SHA512
1bcd4a8c2258fff325c66c99c05d72e548a1f96dac01589f623a82db8a567afd3bed8b8980895fe72361a0be25e8659a023ae39fd7254c47532c34db6843a9bd
-
SSDEEP
6144:QQWZsjoEthRk7h17YeAq535NurXVmC3ZISTdbBVpsGAnq8pXhzdJDILCATo:QtsU4Hk7T7RDhuV3eSTdbpXkXfKe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17a8e0a85972cc55305ec2ee1fa7684c_JaffaCakes118
Files
-
17a8e0a85972cc55305ec2ee1fa7684c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 432KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ