Static task
static1
Behavioral task
behavioral1
Sample
160e3f8fea1c6006054ba817d4bfbed0_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
160e3f8fea1c6006054ba817d4bfbed0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
160e3f8fea1c6006054ba817d4bfbed0_JaffaCakes118
-
Size
1.1MB
-
MD5
160e3f8fea1c6006054ba817d4bfbed0
-
SHA1
57fda05c640c771bc5c2d2eba786cc600329fbd5
-
SHA256
8983fb5f51232420db34d3191ff18f04da565aa72fd80d73a3fd1761cb9f9123
-
SHA512
f2d8e60076e344211f1689220b2a21c562a79cbb9bd6567181dfc3af4b4229899f6838b4675ea06f461b4829c771cb09d1c3745f5b154779fc3c6afe10bdb72b
-
SSDEEP
24576:7X+rMiOE4O1+V9BaxZ1q4Ulw/GApi+7TwFYHpGQJG+:r+4bE57xZ1PUlw/PtEcpGj+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 160e3f8fea1c6006054ba817d4bfbed0_JaffaCakes118
Files
-
160e3f8fea1c6006054ba817d4bfbed0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vitima Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE