Static task
static1
Behavioral task
behavioral1
Sample
17ca5bb2993bc29ce4d581a519f927ad_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
17ca5bb2993bc29ce4d581a519f927ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
17ca5bb2993bc29ce4d581a519f927ad_JaffaCakes118
-
Size
52KB
-
MD5
17ca5bb2993bc29ce4d581a519f927ad
-
SHA1
88aaf74b614c3974afa701fd01be8b8a510265f2
-
SHA256
b0476ca319fec8d361973677beada120314d3bb7af03f35ed7cc21fa77bb0cb1
-
SHA512
f1203005fc0c0c5ec0f286090f54e10b1e2e28908a444337f2cbfeea4fd7a3c1b52831524f6a4eb7083e7167aff0d89e04346800de496c80b5c99f378721b86e
-
SSDEEP
768:qlIi+fCS2gFgCDWA80j0z9P97fQouI8Sd5DCz2hwG8HzRAlJIQtg5R4mClQuK:hLfCuF/Fgz9SG8Sd5ezOMAlJ7O5RFClI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17ca5bb2993bc29ce4d581a519f927ad_JaffaCakes118
Files
-
17ca5bb2993bc29ce4d581a519f927ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ