Static task
static1
Behavioral task
behavioral1
Sample
17bc0f6105f0ff3ab45e1a07056de4ec_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17bc0f6105f0ff3ab45e1a07056de4ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
17bc0f6105f0ff3ab45e1a07056de4ec_JaffaCakes118
-
Size
76KB
-
MD5
17bc0f6105f0ff3ab45e1a07056de4ec
-
SHA1
12525ff9fa06ff68389170e73a5023d8713bdcaf
-
SHA256
436e9d21043a150dd87d83e02a1c51671e23f5f777986afc1be38b67dd03f7cc
-
SHA512
22e0d6e85b3d2488f19e5e6f3aac234e39f38fa083647b3528b83f8ca19119a3d159824b5d648c2c8d74ba268e9bde3d54d9318972b6b589bbefb274be0fff53
-
SSDEEP
768:yB7z6hqzftlARKfZG6berO05D2o1g1noikwKJ2tlL12094kql7esgb1dPS6Z12WM:yBFtdfZT/o1gCvwKJG1g0KkqZhy1M6M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17bc0f6105f0ff3ab45e1a07056de4ec_JaffaCakes118
Files
-
17bc0f6105f0ff3ab45e1a07056de4ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.TEXT Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kjhgk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE