Static task
static1
Behavioral task
behavioral1
Sample
17918e4bad8653406b099e3d161f1170_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
17918e4bad8653406b099e3d161f1170_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
17918e4bad8653406b099e3d161f1170_JaffaCakes118
-
Size
290KB
-
MD5
17918e4bad8653406b099e3d161f1170
-
SHA1
5763901c8468c9fef0a77e1be816541af42dd725
-
SHA256
b741bdbcd6cdb3882e38169fe674ac82bdb5e7becdf6b783227e895f845ea60f
-
SHA512
62f779561127fe460d3babfe06c7b09d1dcbac41bff6a775ac173c736f82e679b054750c5af67bf70236b85dd87449f295217043b67f56266520c86445ece583
-
SSDEEP
6144:P6YajbofxCvcI/b+ksT5hBKgLtlPXhvFh1DNi9Rv3NlcmBqH0pL:JWRb4hBKehv1GRfNfBjL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17918e4bad8653406b099e3d161f1170_JaffaCakes118
Files
-
17918e4bad8653406b099e3d161f1170_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ