Static task
static1
Behavioral task
behavioral1
Sample
17d0eec4f8986e9c7311484e40dc9c48_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17d0eec4f8986e9c7311484e40dc9c48_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
17d0eec4f8986e9c7311484e40dc9c48_JaffaCakes118
-
Size
180KB
-
MD5
17d0eec4f8986e9c7311484e40dc9c48
-
SHA1
960bf3dff1be6833ed6b79fc5dcd8bb3d14c3d7a
-
SHA256
df16595ba33749d216244e6bd9ec52fbc175a77d019eafd572a14adbcf8bbdb7
-
SHA512
fa16cc144c358a676e2a1443a271a85ba8e5cafac5a6040586152ba9b9dd3051c178d82e5db75d82be856833462a5a79bb678f2cf5d148c1658b404f04f71d7f
-
SSDEEP
3072:T5NHGjWQ2AzEibGNeNl9y1CVTDR4RHT89mZUZjrVTdvrl4VWRPtGU:TQpbGQM1CVT94pTJZCd2VC9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17d0eec4f8986e9c7311484e40dc9c48_JaffaCakes118
Files
-
17d0eec4f8986e9c7311484e40dc9c48_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE