Static task
static1
Behavioral task
behavioral1
Sample
165b94f1c0e49ac834267ada8f5ab1ce_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
165b94f1c0e49ac834267ada8f5ab1ce_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
165b94f1c0e49ac834267ada8f5ab1ce_JaffaCakes118
-
Size
160KB
-
MD5
165b94f1c0e49ac834267ada8f5ab1ce
-
SHA1
d8656c9afb8b75d098af77f1ef117bdd5c93eeab
-
SHA256
06ad3ae2a1acafc040fcde09f6ea421d75feb866a5e083f068c72adc8071ffa7
-
SHA512
5a1af1a4f251735d1616469ae606a42d23ebd900afdf3ac809a100a0b0f0d649ceb4687e9cc60e03f6277e0e7cd52c0fd70e98f8730c87bb32543f59cdac1711
-
SSDEEP
3072:1bpOCXrGZwPEhPUvYH4/TMSpQuXf39Wi/6HYyZjjZGJ/:1MLPUQETMmXW7Hhj1GJ/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 165b94f1c0e49ac834267ada8f5ab1ce_JaffaCakes118
Files
-
165b94f1c0e49ac834267ada8f5ab1ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE