Static task
static1
Behavioral task
behavioral1
Sample
179fc6b770dc4aed81e77938d6b63449_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
179fc6b770dc4aed81e77938d6b63449_JaffaCakes118
-
Size
1.2MB
-
MD5
179fc6b770dc4aed81e77938d6b63449
-
SHA1
77450305a00dab3359b9b3a9855ff22676da1383
-
SHA256
b93ff507cd31966f4f9af0431abeb6ef4bdef34ba28990025e4be0ca8039b76f
-
SHA512
ae22fae1fa83b333b2eabeac7b1ec66af050b3d08234f3450500659fd3f2c860ce5800dc086405776649a21bbc0a1d381b0742be9d6b79ed39713c9941d3aeeb
-
SSDEEP
24576:Y4bxzZbTIu2wXhRbYiGTOy9SpeSd1cfzw4KW3NmV:Y49euzfUShd1cfzw4KW9m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 179fc6b770dc4aed81e77938d6b63449_JaffaCakes118
Files
-
179fc6b770dc4aed81e77938d6b63449_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 828KB - Virtual size: 827KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 15KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 261KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ