Static task
static1
Behavioral task
behavioral1
Sample
161ed71e5a53b82478487a99c4c9a257_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
161ed71e5a53b82478487a99c4c9a257_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
161ed71e5a53b82478487a99c4c9a257_JaffaCakes118
-
Size
804KB
-
MD5
161ed71e5a53b82478487a99c4c9a257
-
SHA1
4a03047690d0f2ea0f6af62f8d819e45e0986f69
-
SHA256
05bc75e3c6b92316bb956da1a62390d89fdfa3b1d6bcf1eebe54fe451d46e4bc
-
SHA512
2daba1da8898f3ee20bf467e4b4c8a57cfe09240e148cf768317eea59772de5dbd63e3536fd088ef0f3d61bbaf8bc3a0e9c861bd8c3ba8a8e9eb84a25edce85d
-
SSDEEP
24576:iXdP1oHMN/OOrj7CjEZaMtSNE5HzWvh+:5HM7rjUEZs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 161ed71e5a53b82478487a99c4c9a257_JaffaCakes118
Files
-
161ed71e5a53b82478487a99c4c9a257_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 795KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE