Static task
static1
Behavioral task
behavioral1
Sample
17e85a512aceb57dcde884be5a46014f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17e85a512aceb57dcde884be5a46014f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
17e85a512aceb57dcde884be5a46014f_JaffaCakes118
-
Size
120KB
-
MD5
17e85a512aceb57dcde884be5a46014f
-
SHA1
ed9479698772dfc40c085739916b4df9ea70aa20
-
SHA256
7c932aa8155e6fe17eaf29d6f990dbfd497478d183f44549bf5d56ce3bc754d7
-
SHA512
3cad2e43f393e3c58c1eeeceac35102553e2912342ff9fe7f6c361bf0c7eb5fb7f7e745832e6c4d25ee71b2a49ec10e8ab02eb0126906b62fbdf3af9f65b66ba
-
SSDEEP
3072:otKrw0hzRKPdel8aRM6RBDFZA1f0hzRlby:mE5CP4B/DwGNby
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17e85a512aceb57dcde884be5a46014f_JaffaCakes118 -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
17e85a512aceb57dcde884be5a46014f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ndata Size: 64KB - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 80.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE