Static task
static1
Behavioral task
behavioral1
Sample
16615f8cc8014e202280f6eb9d1fc368_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
16615f8cc8014e202280f6eb9d1fc368_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16615f8cc8014e202280f6eb9d1fc368_JaffaCakes118
-
Size
88KB
-
MD5
16615f8cc8014e202280f6eb9d1fc368
-
SHA1
22187232f580f53dfb316dfb61c486fb574219c9
-
SHA256
2d6b8d1be2e9cf3f5888f5313fcf1e12bd1ad302aa87e6590f30cf9658be7d9b
-
SHA512
0ab0184df35824bb60ea6da006102d3242ec2faa6537d76bdca3bdb5861712413025ca81caae851161dd6afda99b74a5eacb6294fac7fb73aa968ceb88b57a04
-
SSDEEP
768:xg3+16TlezZEatuHqLPkhEryY5USTMSuHcj19lmVWUE2q7NRbCxX5HoL3/QZZHwq:xu+16eZmhtYhUKLPyQH2xEAAwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16615f8cc8014e202280f6eb9d1fc368_JaffaCakes118
Files
-
16615f8cc8014e202280f6eb9d1fc368_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�S=`� _� Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
E��<�� Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE