Static task
static1
Behavioral task
behavioral1
Sample
163cd4d8c045b5e5e5d5457273eda824_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
163cd4d8c045b5e5e5d5457273eda824_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
163cd4d8c045b5e5e5d5457273eda824_JaffaCakes118
-
Size
301KB
-
MD5
163cd4d8c045b5e5e5d5457273eda824
-
SHA1
112dd0a776b6d8de67ce1006707491a2842ba95c
-
SHA256
8f01f6f9aad08db536450b331ea079e0c2c6610df8b250de9370c193764091e9
-
SHA512
42478653a0c60dcbbac70d026aef9245d63227aae78fcbd94162786d2f9b08cd341e7e1b1e49aff2ff82a4e66941b14b498ace5774df0ce8e02e3d7cf337199c
-
SSDEEP
6144:9VAzge2XPoBQfFMINaAjXEoozQ9bd2wn1e4ivzIwMwIEMqKb:9kge4oiaIsOXs+2w1e4iLIwMw2Bb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 163cd4d8c045b5e5e5d5457273eda824_JaffaCakes118
Files
-
163cd4d8c045b5e5e5d5457273eda824_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Mcng4I69 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EF6xSTMl Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
sGVWL9md Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vQY3Cc49 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KEr0RfPl Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
CERTIFICATE
-
EF6xSTMl
-
KEr0RfPl
-
sGVWL9md
-
vQY3Cc49