Static task
static1
Behavioral task
behavioral1
Sample
178f3941b286c9bea33eed4d35f2cb87_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
178f3941b286c9bea33eed4d35f2cb87_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
178f3941b286c9bea33eed4d35f2cb87_JaffaCakes118
-
Size
145KB
-
MD5
178f3941b286c9bea33eed4d35f2cb87
-
SHA1
8945373788b3a7a18a5052fc7bb644d08deba219
-
SHA256
9a813fb96e45c4b2463a026fb36e90ad89713e00d4c36d11ea961eaabf7edf20
-
SHA512
b61a1f1dd4c60cee01d70a31b4c9e7b2d5f8fad9280f66b6c4779ce48a54cf8f9fbbf3820d40a82ad8b4a47177fe279b4c8b7596f66f844db26096cdf0887874
-
SSDEEP
3072:tt2vjQ9wfIEVhHu/EESaezBCekEaXDClHIFIy:ttaSOju3eVCzzClS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 178f3941b286c9bea33eed4d35f2cb87_JaffaCakes118
Files
-
178f3941b286c9bea33eed4d35f2cb87_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 269B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ