Static task
static1
Behavioral task
behavioral1
Sample
17f7b0fa3c20f2580d83ec695dee7e1a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
17f7b0fa3c20f2580d83ec695dee7e1a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
17f7b0fa3c20f2580d83ec695dee7e1a_JaffaCakes118
-
Size
39KB
-
MD5
17f7b0fa3c20f2580d83ec695dee7e1a
-
SHA1
7347cf77427576206539ab0d8be76a7a9beb70f2
-
SHA256
92c0e270bb21cd36d1c916ca44af287d38c398b9ca2605b273334d6361f096f1
-
SHA512
652e29504fef9e195474e31ffd4140c3c4a4655f6a2cc9b1db1617291df232e9a01283e0b485f778b4734c6e583521ad7cc12226278f5ad3c297fbfd0b7e85b7
-
SSDEEP
768:lNSId/rryM/ccDZ0uxBX5+ylMTEERwMTAKzb0xPamblKmn0V7tzwrW2lpQL:lRV/ccDZx+MtFMcKzI5bUxtzoVlpQL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17f7b0fa3c20f2580d83ec695dee7e1a_JaffaCakes118
Files
-
17f7b0fa3c20f2580d83ec695dee7e1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
1983d05fa04e0ba08b5321053b931321
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetCurrentThread
GetCurrentProcess
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE