Static task
static1
Behavioral task
behavioral1
Sample
160323ad2b23785389bffba24e087854_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
160323ad2b23785389bffba24e087854_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
160323ad2b23785389bffba24e087854_JaffaCakes118
-
Size
318KB
-
MD5
160323ad2b23785389bffba24e087854
-
SHA1
6a9260547a8231a0238bb1513ae965a699112465
-
SHA256
a745519a83ee32397f7f9c2dc04917c28c2c92835e7bbc1d5ec00ea860a4abec
-
SHA512
f2abf740a13979c1f11e4214da135228fe45383b24cb536d36e65a4a36ec2f50a45db50fdc6d3fef5ace53edc318b93411e31ee2c1e327e5245dfa4cf6d9af9b
-
SSDEEP
6144:6REMnqOoEhFdaeuYOluo3E8M+NOF4o9Cg1JVgTp3r5QY5pj3WX58lK4Lca:6tq1yTaTtuP8MGOtG3QYT36qs4ga
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 160323ad2b23785389bffba24e087854_JaffaCakes118
Files
-
160323ad2b23785389bffba24e087854_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.CelkG Size: 312KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.7EG3xW Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.saM Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE