Static task
static1
Behavioral task
behavioral1
Sample
168ebee1bd9e26e829c3566627ec5f16_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
168ebee1bd9e26e829c3566627ec5f16_JaffaCakes118
-
Size
231KB
-
MD5
168ebee1bd9e26e829c3566627ec5f16
-
SHA1
3c6af7ab80b72e6cb4a276bf49859de03135fbff
-
SHA256
27a5dd12cff8a57c8d905bf72df4021dc826eb8258a4db1668e3c659df4cf5d7
-
SHA512
883a532d5c2240a4f8e1c6728768bba2168f41c47e516fa41c713d69222149e24a7110b07c24b15979febc9d78efd32434131cf9e04f84f486760d68e3c7f530
-
SSDEEP
3072:Z2SrGLPegf+J7Q5sZpkW9Hx1uQqUu6n+AvNoSy0i/9zS+JSd+YGoCm4/UN:ZXO2zZqrID+cNoSdi/xS+JNBrMN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 168ebee1bd9e26e829c3566627ec5f16_JaffaCakes118
Files
-
168ebee1bd9e26e829c3566627ec5f16_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 187KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yP Size: 10KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE