Static task
static1
Behavioral task
behavioral1
Sample
16949e8297a5187c22064d9135da6c46_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
16949e8297a5187c22064d9135da6c46_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16949e8297a5187c22064d9135da6c46_JaffaCakes118
-
Size
248KB
-
MD5
16949e8297a5187c22064d9135da6c46
-
SHA1
3dcbc9614ce33dd330c9ea8e5735c1a69b1e8a5d
-
SHA256
988b0a7d0341da6b8a1d458889d6458cead1ac2a6e23fc4bafd9b119b4d52243
-
SHA512
28bbe6a4c23bf2cdc385847f391e1c17cbb2c0c59290c7d73b863912051596b615f04086d374c4138c6ecd025140fdaf94cc6738dd1313126b903cc2d50b92a7
-
SSDEEP
6144:UrFAI7q0vu9IgS89kY0Wjajm2HCOwsaNhD320zRnMt5:iN9rgxkmARwphIP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16949e8297a5187c22064d9135da6c46_JaffaCakes118
Files
-
16949e8297a5187c22064d9135da6c46_JaffaCakes118.exe windows:4 windows x86 arch:x86
434660c0dd3a0cc6ab7995aa13fd5d76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ord516
ord666
ord631
ord632
ord526
ord528
ord711
ord606
ord608
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ