Static task
static1
Behavioral task
behavioral1
Sample
178f98acea9b21af4af2c70830ec60d9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
178f98acea9b21af4af2c70830ec60d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
178f98acea9b21af4af2c70830ec60d9_JaffaCakes118
-
Size
464KB
-
MD5
178f98acea9b21af4af2c70830ec60d9
-
SHA1
c458000646c3f4030a83f26e478ecee5ee7864b2
-
SHA256
ac209600a5d5ad80b71e35ff0f923de26161907881706c9deb5b8d4a27cc027a
-
SHA512
4737eecbb641fd5e66c910978ef1d00b2677d9ed51f87061c5b6ec8f5c30ba73b528da876b7408f4c7eb78f01d521c3b8bc00b1bfcc61807e06249eb9eedd432
-
SSDEEP
6144:+x6iVRLGDZLdHbTLvSAuYC27NkoTD/Eyf/To1ysI5uw7+WJz6lyqp3U+iyPmyQCv:8F6v73qbL2vnTowJ6Vh+yPQrrfcFT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 178f98acea9b21af4af2c70830ec60d9_JaffaCakes118
Files
-
178f98acea9b21af4af2c70830ec60d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 374KB - Virtual size: 373KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ